CVE-2022-37418

The CVE-2022-37418 issue concerns the Remote Keyless Entry (RKE) receiving unit used in Nissan, Kia, and Hyundai vehicles through 2017. The vulnerability arises when an attacker captures two consecutive valid key fob signals over the radio, enabling a RollBack replay attack that allows the attack...

CVE-2022-37418

The Remote Keyless Entry RKE receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote attackers to perform unlock operations and force a resynchronization after capturing two consecutive valid key fob signals over the radio, aka a RollBack attack. The attacker retain...

CVE-2022-37305

The Remote Keyless Entry RKE receiving unit on certain Honda vehicles through 2018 allows remote attackers to perform unlock operations and force a resynchronization after capturing five consecutive valid RKE signals over the radio, aka a RollBack attack. The attacker retains the ability to unloc...

CVE-2022-37305

Summary: CVE-2022-37305 affects Honda vehicles up to 2018 and concerns the Remote Keyless Entry (RKE) receiving unit. The root cause is a RollBack-like vulnerability where an attacker, after capturing five consecutive valid RKE signals transmitted over RF, can remotely unlock the vehicle and forc...

CVE-2022-36945

The Remote Keyless Entry RKE receiving unit on certain Mazda vehicles through 2020 allows remote attackers to perform unlock operations and force a resynchronization after capturing three consecutive valid key-fob signals over the radio, aka a RollBack attack. The attacker retains the ability to...

CVE-2022-36945

The CVE-2022-36945 entry concerns Mazda vehicles’ Remote Keyless Entry (RKE) receiving unit up to 2020. The root issue is a RollBack attack that, after three consecutive valid key-fob signals, allows a remote attacker to unlock and force resynchronization, with the attacker retaining unlock capab...

Remote Keyless Entry 安全漏洞

Remote Keyless Entry RKE is a system used to remotely lock and unlock a vehicle. A security vulnerability exists in Nissan, Kia, and Hyundai vehicles Remote Keyless Entry RKE, which stems from a vulnerability that allows a remote attacker to perform an unlock operation and force a resynchronizati...

Remote Keyless Entry 安全漏洞

Remote Keyless Entry RKE is a system used to remotely lock and unlock a vehicle. The Remote Keyless Entry RKE receiving unit on certain Mazda vehicles 2020 and prior versions has a security vulnerability that stems from a vulnerability that allows a remote attacker to perform an unlocking operati...

PT-2022-23693 · Mazda · Mazda Vehicles

Name of the Vulnerable Software and Affected Versions: Mazda vehicles affected versions not specified Description: The issue concerns the Remote Keyless Entry RKE receiving unit, which allows remote attackers to perform unlock operations and force a resynchronization after capturing three...

Remote Keyless Entry 安全漏洞

Remote Keyless Entry RKE is a system used to remotely lock and unlock a vehicle. A security vulnerability exists in Honda Remote Keyless Entry RKE that stems from allowing a remote attacker to perform an unlock operation and force a resynchronization, known as a rollback attack, after capturing...

编号撤回

This CVE number has been withdrawn...

编号撤回

This CVE number has been withdrawn...

CVE-2022-40154

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

编号撤回

Mealie is a self-hosted recipe manager and meal planner by Hayden Individual Developers in the United States. This CVE number has been withdrawn...

编号已被CVE保留

No details are available at this time...

编号已被CVE保留

No details are available at this time...

编号撤回

This CVE number has been withdrawn...

编号撤回

This CVE number has been withdrawn...

编号已被CVE保留

No details are available at this time...

Yubico pam-u2f: Local PIN Bypass vulnerability

Background Yubico pam-u2f is a PAM module for FIDO2 and U2F keys. Description A logic issue in Yubico pam-u2f could result in the bypass of a PIN entry requirement when authenticating with FIDO2. Impact An attacker with local access to certain applications using pam-u2f for authentication could...