https://vulnogram.org/ Most recent CVEs assigned by Automotive Security Research Group (ASRG) (asrg). https://vulnogram.org/seaview/icons/asrg.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-49319 https://vulnogram.org/CVE-2026-49319 Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling-code authentication. An attacker within RF range who records two cons… Medium Thu, 25 Jun 2026 14:11:18 GMT https://vulnogram.org/CVE-2026-49318 https://vulnogram.org/CVE-2026-49318 Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control M… Low Fri, 29 May 2026 13:18:52 GMT https://vulnogram.org/CVE-2026-49317 https://vulnogram.org/CVE-2026-49317 Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control M… Low Fri, 29 May 2026 12:42:27 GMT https://vulnogram.org/CVE-2026-49316 https://vulnogram.org/CVE-2026-49316 Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the motorcycle's anti-theft shutdown by forcing the Wireless Control Module (WCM) into th… Medium Fri, 29 May 2026 12:39:23 GMT https://vulnogram.org/CVE-2026-49325 https://vulnogram.org/CVE-2026-49325 Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with access to the Wireless Control Module (WCM) wiring harness to bypass the anti-theft shu… Medium Fri, 29 May 2026 12:37:41 GMT https://vulnogram.org/CVE-2026-49324 https://vulnogram.org/CVE-2026-49324 Uncontrolled resource consumption in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with write access to the in-vehicle network to permanently immobilize the motorcyc… Medium Fri, 29 May 2026 12:32:51 GMT https://vulnogram.org/CVE-2026-49323 https://vulnogram.org/CVE-2026-49323 Weak authentication between the Wireless Control Module (WCM) and the Engine Control Module (ECM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read access to the in-vehicle network to recover t… Medium Fri, 29 May 2026 12:31:35 GMT https://vulnogram.org/CVE-2026-49322 https://vulnogram.org/CVE-2026-49322 Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read access to the in-vehicle network to recover the user-set unlock PIN by passively obser… Medium Fri, 29 May 2026 07:29:55 GMT https://vulnogram.org/CVE-2026-2541 https://vulnogram.org/CVE-2026-2541 The Micca KE700 system relies on a 6-bit portion of an identifier for authentication within rolling codes, providing only 64 possible combinations. This low entropy allows an attacker to perform a brute-force attack against one component of the rolli… Medium Sun, 15 Feb 2026 11:07:40 GMT https://vulnogram.org/CVE-2026-2540 https://vulnogram.org/CVE-2026-2540 The Micca KE700 system contains flawed resynchronization logic and is vulnerable to replay attacks. This attack requires sending two previously captured codes in a specific sequence. As a result, the system can be forced to accept previously used (st… High Sun, 15 Feb 2026 11:03:26 GMT https://vulnogram.org/CVE-2026-2539 https://vulnogram.org/CVE-2026-2539 The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool (e.g., SDR) can capture the random number and counters transmitted in cleartext, which is sensitive informa… Medium Sun, 15 Feb 2026 10:58:38 GMT https://vulnogram.org/CVE-2025-32063 https://vulnogram.org/CVE-2025-32063 There is a misconfiguration vulnerability inside the Infotainment ECU manufactured by BOSCH. The vulnerability happens during the startup phase of a specific systemd service, and as a result, the following developer features will be activated: the di… Medium Sun, 15 Feb 2026 10:48:34 GMT https://vulnogram.org/CVE-2025-32062 https://vulnogram.org/CVE-2025-32062 The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary validation of user-supplied data, which can result in a stack-based buffer… High Sun, 15 Feb 2026 10:47:57 GMT https://vulnogram.org/CVE-2025-32061 https://vulnogram.org/CVE-2025-32061 The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary validation of user-supplied data, which can result in a stack-based buffer… High Sun, 15 Feb 2026 10:47:15 GMT https://vulnogram.org/CVE-2025-32060 https://vulnogram.org/CVE-2025-32060 The system suffers from the absence of a kernel module signature verification. If an attacker can execute commands on behalf of root user (due to additional vulnerabilities), then he/she is also able to load custom kernel modules to the kernel space… Medium Sun, 15 Feb 2026 10:46:23 GMT https://vulnogram.org/CVE-2025-32059 https://vulnogram.org/CVE-2025-32059 The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary validation of user-supplied data, which can result in a stack-based buffer… High Sun, 15 Feb 2026 10:45:42 GMT https://vulnogram.org/CVE-2025-32058 https://vulnogram.org/CVE-2025-32058 The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interface through a custom protocol. There is a vulnerability during processing requests of this protocol on the V85… Critical Sun, 15 Feb 2026 10:44:48 GMT https://vulnogram.org/CVE-2025-32057 https://vulnogram.org/CVE-2025-32057 The Infotainment ECU manufactured by Bosch which is installed in Nissan Leaf ZE1 – 2020 uses a Redbend service for over-the-air provisioning and updates. HTTPS is used for communication with the back-end server. Due to usage of the default configurat… Medium Network Exploitable Thu, 22 Jan 2026 15:22:21 GMT https://vulnogram.org/CVE-2025-32056 https://vulnogram.org/CVE-2025-32056 The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which all… Medium Thu, 22 Jan 2026 15:21:21 GMT https://vulnogram.org/CVE-2025-6785 https://vulnogram.org/CVE-2025-6785 Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with s… Medium Thu, 04 Sep 2025 14:13:22 GMT https://vulnogram.org/CVE-2025-7020 https://vulnogram.org/CVE-2025-7020 An incorrect encryption implementation vulnerability exists in the system log dump feature of BYD's DiLink 3.0 OS (e.g. in the model ATTO3). An attacker with physical access to the vehicle can bypass the encryption of log dumps on the In-Vehicle Info… Medium Sat, 09 Aug 2025 12:42:29 GMT https://vulnogram.org/CVE-2023-28902 https://vulnogram.org/CVE-2023-28902 An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause denial-of-service of the infotainment system. The vulnerability was originally discovered in Skoda Superb I… Low Sat, 28 Jun 2025 15:38:23 GMT https://vulnogram.org/CVE-2023-28903 https://vulnogram.org/CVE-2023-28903 An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system. Low Sat, 28 Jun 2025 15:38:02 GMT https://vulnogram.org/CVE-2023-28904 https://vulnogram.org/CVE-2023-28904 A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical access to the MIB3 ECU to bypass firmware signature verification and run arbitrary code in the infotainment syste… Medium Sat, 28 Jun 2025 15:37:35 GMT https://vulnogram.org/CVE-2023-28905 https://vulnogram.org/CVE-2023-28905 A heap buffer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker to execute arbitrary code on it. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V… High Sat, 28 Jun 2025 15:37:09 GMT https://vulnogram.org/CVE-2023-28906 https://vulnogram.org/CVE-2023-28906 A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the system to escalate privileges and obtain administrative access to the system. The vulnerability was originally discovered in Skoda Sup… High Sat, 28 Jun 2025 15:36:47 GMT https://vulnogram.org/CVE-2023-28907 https://vulnogram.org/CVE-2023-28907 There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the main operating system to compromise the CPU core responsible for CAN message processing. The vulnerability was originally discove… Medium Sat, 28 Jun 2025 15:36:10 GMT https://vulnogram.org/CVE-2023-28908 https://vulnogram.org/CVE-2023-28908 A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow when receiving non-fragmented HCI packets on a channel. Th… Medium Sat, 28 Jun 2025 15:35:48 GMT https://vulnogram.org/CVE-2023-28909 https://vulnogram.org/CVE-2023-28909 A specific flaw exists within the Bluetooth stack of the MIB3 unit. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow when receiving fragmented HCI packets on a channel. An attacker ca… High Sat, 28 Jun 2025 15:35:21 GMT https://vulnogram.org/CVE-2023-28910 https://vulnogram.org/CVE-2023-28910 A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled abortion flag eventually leading to bypassing assertion functions. The vulnerability was originally discovered in Skoda Superb III… High Sat, 28 Jun 2025 15:34:50 GMT https://vulnogram.org/CVE-2023-28911 https://vulnogram.org/CVE-2023-28911 A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper validation of user-supplied data, which can result in an arbitrary channel disconnection. An attacker can leverage this vulnerabilit… Medium Sat, 28 Jun 2025 15:34:25 GMT https://vulnogram.org/CVE-2023-28912 https://vulnogram.org/CVE-2023-28912 The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution privilege on the system or physical access to the system to obtain vehicle owner's contact data. The vulnerability was originally… Medium Sat, 28 Jun 2025 15:33:58 GMT https://vulnogram.org/CVE-2023-29113 https://vulnogram.org/CVE-2023-29113 The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the proprietary inter-process communication mechanism, leaving attackers with presence in the system an ability to undermine access con… Medium Sat, 28 Jun 2025 15:33:26 GMT https://vulnogram.org/CVE-2025-6030 https://vulnogram.org/CVE-2025-6030 Use of fixed learning codes, one code to lock the car and the other code to unlock it, in the Key Fob Transmitter in Cyclone Matrix TRF Smart Keyless Entry System, which allows a replay attack. Research was completed on the 2024 KIA Soluto. Attack co… Critical Fri, 13 Jun 2025 14:38:58 GMT https://vulnogram.org/CVE-2025-6029 https://vulnogram.org/CVE-2025-6029 Use of fixed learning codes, one code to lock the car and the other code to unlock it, the Key Fob Transmitter in KIA-branded Aftermarket Generic Smart Keyless Entry System, primarily distributed in Ecuador, which allows a replay attack. Manufacture… Critical Fri, 13 Jun 2025 14:25:50 GMT https://vulnogram.org/CVE-2023-29126 https://vulnogram.org/CVE-2023-29126 The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication. Medium Tue, 05 Nov 2024 15:28:53 GMT https://vulnogram.org/CVE-2023-29125 https://vulnogram.org/CVE-2023-29125 A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. Critical Tue, 05 Nov 2024 15:27:22 GMT https://vulnogram.org/CVE-2023-29122 https://vulnogram.org/CVE-2023-29122 Under certain conditions, access to service libraries is granted to account they should not have access to. Medium Tue, 05 Nov 2024 15:24:43 GMT https://vulnogram.org/CVE-2023-29121 https://vulnogram.org/CVE-2023-29121 Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system. Critical Tue, 05 Nov 2024 15:23:41 GMT https://vulnogram.org/CVE-2023-29120 https://vulnogram.org/CVE-2023-29120 Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system. Critical Tue, 05 Nov 2024 15:22:22 GMT https://vulnogram.org/CVE-2023-29119 https://vulnogram.org/CVE-2023-29119 Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php. Critical Tue, 05 Nov 2024 15:20:56 GMT https://vulnogram.org/CVE-2023-29118 https://vulnogram.org/CVE-2023-29118 Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php. Critical Tue, 05 Nov 2024 15:18:04 GMT https://vulnogram.org/CVE-2023-29117 https://vulnogram.org/CVE-2023-29117 Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system. High Tue, 05 Nov 2024 15:14:23 GMT https://vulnogram.org/CVE-2023-29116 https://vulnogram.org/CVE-2023-29116 Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained. Medium Tue, 05 Nov 2024 15:08:28 GMT https://vulnogram.org/CVE-2023-29115 https://vulnogram.org/CVE-2023-29115 In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service (e.g. reboot). Medium Tue, 05 Nov 2024 15:04:04 GMT https://vulnogram.org/CVE-2023-29114 https://vulnogram.org/CVE-2023-29114 System logs could be accessed through web management application due to a lack of access control. An attacker can obtain the following sensitive information: • Wi-Fi access point credentials to which the EV charger can connect. • APN web address and… Medium Tue, 05 Nov 2024 15:01:08 GMT https://vulnogram.org/CVE-2024-6245 https://vulnogram.org/CVE-2024-6245 Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market. This issue… High Mon, 28 Oct 2024 16:42:52 GMT https://vulnogram.org/CVE-2024-23923 https://vulnogram.org/CVE-2024-23923 Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. Authentication is not required to e… High Sat, 28 Sep 2024 06:22:22 GMT https://vulnogram.org/CVE-2024-23960 https://vulnogram.org/CVE-2024-23960 Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability. This vulnerability allows physically present attackers to bypass signature validation mechanism on affected installations of Alpine Halo9 devices. Authentication is not requ… Medium Sat, 28 Sep 2024 06:20:12 GMT https://vulnogram.org/CVE-2024-23924 https://vulnogram.org/CVE-2024-23924 Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. Authentication is not r… Medium Sat, 28 Sep 2024 06:18:57 GMT