PT-2018-18977 · Bmw · Hu Nbt

Publicado 2018-05-31 · Atualizado 2018-06-29 · CVE-2018-9320

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BMW HU NBT (Infotainment) component on vehicles produced in 2012 through 2018

Description The issue allows for a local attack when a USB device is plugged into the Head Unit HU NBT component, affecting various BMW series vehicles.

Recommendations For vehicles produced in 2012 through 2018, consider restricting or disabling the use of USB devices in the Head Unit HU NBT component until a fix is available.

Exploit

Correção

Protection Mechanism Failure

Enumeração de Fraquezas

CWE-693

Identificadores relacionados

CVE-2018-9320

Produtos afetados

Hu Nbt

Referências · 4

• 🔥 https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf · Exploit
• https://theregister.co.uk/2018/05/23/bmw_security_bugs · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-9320 · Nota de Segurança
• http://securityfocus.com/bid/104258 · Nota