PT-2023-24266 · Nissan · Nissan Sylphy Classic

Kevin Chen · Publicado 2023-05-22 · Atualizado 2024-08-02 · CVE-2023-33281

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Nissan Sylphy Classic version 2021

Description The remote keyfob system sends the same RF signal for each door-open request, allowing for a replay attack. The vendor claims this issue cannot be reproduced with genuine Nissan parts, citing a mismatch in the technology used in the exploit demonstration.

Recommendations For Nissan Sylphy Classic version 2021, consider restricting access to the door handle and keyfob system to minimize the risk of exploitation. As a temporary workaround, avoid using the remote keyfob system for door-open requests until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-294

Identificadores relacionados

CVE-2023-33281

Produtos afetados

Nissan Sylphy Classic

Referências · 6

• 🔥 https://twitter.com/Kevin2600/status/1658059570806415365 · Exploit
• 🔥 https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html · Exploit
• 🔥 https://youtube.com/watch?v=GG1utSdYG1k · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-33281 · Nota de Segurança
• https://t.me/cvenotify/88575 · Publicação no Telegram
• https://t.me/cvenotify/85290 · Publicação no Telegram