The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a remote attack via Bluetooth when in pairing mode, leading to a Head Unit reboot.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/104258 | Third Party Advisory VDB Entry |
| https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf | Exploit Third Party Advisory |
| https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ | Third Party Advisory |
| http://www.securityfocus.com/bid/104258 | Third Party Advisory VDB Entry |
| https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf | Exploit Third Party Advisory |
| https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/104258 - Third Party Advisory, VDB Entry | |
| References | () https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf - Exploit, Third Party Advisory | |
| References | () https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ - Third Party Advisory |
Information
Published : 2018-05-31 12:29
Updated : 2024-11-21 04:15
NVD link : CVE-2018-9313
Mitre link : CVE-2018-9313
CVE.ORG link : CVE-2018-9313
JSON object : View
Products Affected
bmw
- head_unit_hu_nbt_firmware
- head_unit_hu_nbt
CWE
CWE-693
Protection Mechanism Failure