EUVD-2023-32521

Malicious code in bioql PyPI...

EUVD-2023-32527

Malicious code in bioql PyPI...

EUVD-2023-32531

Malicious code in bioql PyPI...

EUVD-2023-32525

Malicious code in bioql PyPI...

EUVD-2023-32528

Malicious code in bioql PyPI...

EUVD-2023-32532

Malicious code in bioql PyPI...

EUVD-2023-32519

Malicious code in bioql PyPI...

EUVD-2023-32530

Malicious code in bioql PyPI...

EUVD-2023-32529

Malicious code in bioql PyPI...

EUVD-2023-32716

Malicious code in bioql PyPI...

EUVD-2023-32522

Malicious code in bioql PyPI...

EUVD-2023-32526

Malicious code in bioql PyPI...

EUVD-2023-32520

Malicious code in bioql PyPI...

PerfektBlue Bluetooth Vulnerabilities Expose Millions of Vehicles to Remote Code Execution

Cybersecurity researchers have discovered a set of four security flaws in OpenSynergy's BlueSDK Bluetooth stack that, if successfully exploited, could allow remote code execution on millions of transport vehicles from different vendors. The vulnerabilities, dubbed PerfektBlue , can be fashioned...

CVE-2023-28912

The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution privilege on the system or physical access to the system to obtain vehicle owner's contact data. The vulnerability was originally discovered in Skoda Superb III car with MIB3...

CVE-2023-29113

The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the proprietary inter-process communication mechanism, leaving attackers with presence in the system an ability to undermine access control restrictions implemented at the operating...

CVE-2023-28906

A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the system to escalate privileges and obtain administrative access to the system. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM par...

CVE-2023-28910

A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled abortion flag eventually leading to bypassing assertion functions. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number...

CVE-2023-28905

A heap buffer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker to execute arbitrary code on it. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part...

CVE-2023-28902

An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause denial-of-service of the infotainment system. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part...