CVE-2025-32056
Anti-Theft Bypass for Infotainment ECU
- State
- Published
- Severity
- 4.0 Medium
- Published
- Jan 22, 2026
- Updated
- Jan 22, 2026
- Reserved
- Apr 3, 2025
Description
The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection.
First identified on Nissan Leaf ZE1 manufactured in 2020.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.0 Medium | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N | ASRG |
Weaknesses
- CWE-1241 Use of Predictable Algorithm in Random Number Generator
Affected Products
| Product | Versions |
|---|---|
Infotainment system ECUBosch |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.