KOFFEE - Kia OFFensivE Exploit

This module exploits CVE-2020-8539, which is an arbitrary code execution vulnerability that allows an to attacker execute the micomd binary file on the head unit of Kia Motors. This module has been tested on SOP.003.30.18.0703, SOP.005.7.181019 and SOP.007.1.191209 head unit software versions. Th...

CVE-2020-8539

creationtimestamp| type| source ---|---|--- 2020-12-01 20:54:10+00:00| seen| https://t.me/cibsecurity/16999 2021-04-23 13:33:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/android/local/koffee.rb 2025-02-06 03:13:44+00:00| seen|...

CVE-2020-8539

CVE-2020-8539 affects Kia Motors head units (SOP.003.30.18.0703, SOP.005.7.181019, SOP.007.1.191209). The vulnerability arises from an arbitrary command execution via the micomd daemon, enabling an attacker with local access to inject commands and generate CAN frames on the M-CAN multimedia bus. ...