CVE-2023-6073

Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of the VW Group with the same hardware) and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls.

CVSS v3 5.7 MEDIUM

5.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.1 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-ivi-ecu/	Exploit Third Party Advisory
https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-ivi-ecu/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:volkswagen:id.3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:volkswagen:id.3:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:43

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-11-10 08:15

Updated : 2024-11-21 08:43

NVD link : CVE-2023-6073

Mitre link : CVE-2023-6073

CVE.ORG link : CVE-2023-6073

JSON object : View

Products Affected

volkswagen

id.3_firmware
id.3

CWE

CWE-20

Improper Input Validation

CWE-284

Improper Access Control

NVD-CWE-noinfo

{"id": "CVE-2023-6073", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@asrg.io", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.1}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 2.1}]}, "published": "2023-11-10T08:15:08.100", "references": [{"url": "https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-ivi-ecu/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@asrg.io"}, {"url": "https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-ivi-ecu/", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "cve@asrg.io", "description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-284"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of the VW Group with the same hardware) and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls.\n"}, {"lang": "es", "value": "El atacante puede realizar un ataque de Denegaci\u00f3n de Servicio para bloquear la ECU ICAS 3 IVI en un Volkswagen ID.3 (y otros veh\u00edculos del Grupo VW con el mismo hardware) y falsificar comandos de configuraci\u00f3n de volumen para activar irreversiblemente el volumen de audio al m\u00e1ximo a trav\u00e9s de llamadas REST API."}], "lastModified": "2024-11-21T08:43:05.450", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:volkswagen:id.3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EF1065C-EB08-4BBC-A418-E6DB0AD322B5", "versionEndExcluding": "3.2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:volkswagen:id.3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FDFD418D-C4AB-4797-86E4-98462AF5C938"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@asrg.io"}