CVE-2024-6348
Predictable seed generation after ECU reset
- State
- Published
- Severity
- 5.3 Medium
- Published
- Aug 19, 2024
- Updated
- Aug 19, 2024
- Reserved
- Jun 26, 2024
Description
Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima (2022) allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/V:D/RE:H | ASRG |
Weaknesses
- CWE-330 Use of Insufficiently Random Values
Affected Products
| Product | Versions |
|---|---|
AltimaNissan |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.