CVE-2023-29389: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is validated"...

PT-2023-22241 · Toyota · Toyota Rav4

Name of the Vulnerable Software and Affected Versions: Toyota RAV4 2021 vehicles Description: The issue allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is...