Unrated severityNVD Advisory· Published Dec 1, 2023· Updated Aug 2, 2024
Weak encoding for password in UDS services
CVE-2023-28896
Description
Access to critical Unified Diagnostics Services (UDS) of the Modular Infotainment Platform 3 (MIB3) infotainment is transmitted via Controller Area Network (CAN) bus in a form that can be easily decoded by attackers with physical access to the vehicle.
Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- JOYNEXT/MIB3 Infotainment Unitv5Range: 0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.