PT-2018-18971 · Bmw · Hu Nbt

Publicado 2018-05-31 · Atualizado 2018-06-29 · CVE-2018-9314

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BMW HU NBT (Infotainment) component on BMW vehicles produced in 2012 through 2018

Description The issue affects the Head Unit HU NBT component, allowing an attack by an attacker with direct physical access.

Recommendations For vehicles produced in 2012 through 2018, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Protection Mechanism Failure

Enumeração de Fraquezas

CWE-693

Identificadores relacionados

CVE-2018-9314

Produtos afetados

Hu Nbt

Referências · 4

• 🔥 https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf · Exploit
• https://theregister.co.uk/2018/05/23/bmw_security_bugs · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-9314 · Nota de Segurança
• http://securityfocus.com/bid/104258 · Nota