High severity7.8NVD Advisory· Published Jun 28, 2025· Updated Jun 17, 2026

CVE-2023-28906

Description

A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the system to escalate privileges and obtain administrative access to the system. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the referenced resources.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Volkswagen/MIB3 Infotainment Systemllm-fuzzy

Patches

Vulnerability mechanics

References

asrg.io/security-advisories/vulnerabilities-in-volkswagen-mib3-infotainment-part-2/nvd
i.blackhat.com/EU-24/Presentations/EU-24-Parnishchev-OverTheAirVW.pdfnvd
pcacybersecurity.com/resources/advisory/vulnerabilities-in-vw-mib3-infotainment-2nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000