CVE-2023-33281

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-33281
The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html Exploit Third Party Advisory
https://twitter.com/Kevin2600/status/1658059570806415365 Exploit Third Party Advisory
https://www.youtube.com/watch?v=GG1utSdYG1k Exploit Third Party Advisory
https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html Exploit Third Party Advisory
https://twitter.com/Kevin2600/status/1658059570806415365 Exploit Third Party Advisory
https://www.youtube.com/watch?v=GG1utSdYG1k Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:nissan:sylphy_classic_2021_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nissan:sylphy_classic_2021:-:*:*:*:*:*:*:*
History

21 Nov 2024, 08:05

Type Values Removed Values Added
References () https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html - Exploit, Third Party Advisory () https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html - Exploit, Third Party Advisory
References () https://twitter.com/Kevin2600/status/1658059570806415365 - Exploit, Third Party Advisory () https://twitter.com/Kevin2600/status/1658059570806415365 - Exploit, Third Party Advisory
References () https://www.youtube.com/watch?v=GG1utSdYG1k - Exploit, Third Party Advisory () https://www.youtube.com/watch?v=GG1utSdYG1k - Exploit, Third Party Advisory

26 May 2023, 13:45

Type Values Removed Values Added
References (MISC) https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html - (MISC) https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html - Exploit, Third Party Advisory
References (MISC) https://www.youtube.com/watch?v=GG1utSdYG1k - (MISC) https://www.youtube.com/watch?v=GG1utSdYG1k - Exploit, Third Party Advisory
References (MISC) https://twitter.com/Kevin2600/status/1658059570806415365 - (MISC) https://twitter.com/Kevin2600/status/1658059570806415365 - Exploit, Third Party Advisory
CWE CWE-294
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CPE cpe:2.3:o:nissan:sylphy_classic_2021_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nissan:sylphy_classic_2021:-:*:*:*:*:*:*:*

22 May 2023, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-05-22 02:15

Updated : 2024-11-21 08:05

NVD link : CVE-2023-33281

Mitre link : CVE-2023-33281

CVE.ORG link : CVE-2023-33281

JSON object : View

Products Affected

nissan

  • sylphy_classic_2021
  • sylphy_classic_2021_firmware
CWE
CWE-294

Authentication Bypass by Capture-replay