CVE-2024-6347

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-6347
* Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima (2022) allows attackers to trigger denial-of-service (DoS) by unauthorized access to the ECU's programming session. * No preconditions implemented for ECU management functionality through UDS session in the Blind Spot Detection Sensor ECU in Nissan Altima (2022) allows attackers to disrupt normal ECU operations by triggering a control command without authentication.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://asrg.io/security-advisories/CVE-2024-6347 Broken Link
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:nissan-global:blind_spot_detection_sensor_ecu_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nissan-global:altima:2022:*:*:*:*:*:*:*
History

16 Aug 2024, 14:33

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CPE cpe:2.3:h:nissan-global:altima:2022:*:*:*:*:*:*:*
cpe:2.3:o:nissan-global:blind_spot_detection_sensor_ecu_firmware:-:*:*:*:*:*:*:*
References () https://asrg.io/security-advisories/CVE-2024-6347 - () https://asrg.io/security-advisories/CVE-2024-6347 - Broken Link
First Time Nissan-global altima
Nissan-global
Nissan-global blind Spot Detection Sensor Ecu Firmware
Summary
  • (es) El acceso en modo privilegiado desprotegido a través de la sesión UDS en el firmware de ECU de Blind Spot Detection Sensor ECU en Nissan Altima (2022) permite a los atacantes activar una denegación de servicio (DoS) mediante el acceso no autorizado a la sesión de programación de la ECU. * No se implementaron condiciones previas para la funcionalidad de gestión de la ECU a través de la sesión UDS en Blind Spot Detection Sensor ECU in Nissan Altima (2022), lo que permite a los atacantes interrumpir las operaciones normales de la ECU activando un comando de control sin autenticación.

15 Aug 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-15 15:15

Updated : 2024-08-16 14:33

NVD link : CVE-2024-6347

Mitre link : CVE-2024-6347

CVE.ORG link : CVE-2024-6347

JSON object : View

Products Affected

nissan-global

  • altima
  • blind_spot_detection_sensor_ecu_firmware
CWE
NVD-CWE-noinfo CWE-285

Improper Authorization

CWE-306

Missing Authentication for Critical Function