← All advisories

Medium severity4.0NVD Advisory· Published Jan 12, 2024· Updated Jun 17, 2026

CVE-2023-28897

CVE-2023-28897

Description

The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware.

Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Skoda/Superb 3 Firmware
cpe:2.3:o:skoda-auto:superb_3_firmware:2022:*:*:*:*:*:*:*
Skoda/MIB3 infotainmentllm-create
Skoda/Superb III (3V3)llm-create
JOYNEXT/MIB3 Infotainment Unitv5
Range: 0

Patches

Vulnerability mechanics

References

1

asrg.io/security-advisories/cve-2023-28897nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.