Kevin2600

**Name of the Vulnerable Software and Affected Versions** MCK Smartlock version 1.0 **Description** The issue is related to the use of an insecure algorithm for rolling codes, which allows attackers to unlock the mechanism via replay attacks. **Recommendations** For MCK Smartlock version 1.0, consider disabling the rolling code feature until a secure algorithm is implemented to prevent replay attacks.

**Name of the Vulnerable Software and Affected Versions** Honda Civic 2012 Honda X-RV 2018 Honda C-RV 2020 Honda Accord 2020 Honda Odyssey 2020 Honda Inspire 2021 Honda Fit 2022 Honda Civic 2022 Honda VE-1 2022 Honda Breeze 2022 **Description** The keyfob subsystem in Honda vehicles allows a replay attack for unlocking, related to a non-expiring rolling code and counter resynchronization. This issue is connected to the system of keyless access in modern vehicles, based on rolling codes generated by a pseudorandom number generator algorithm to ensure the use of unique strings at each button press. A counter in the vehicles checks the chronology of generated codes, increasing the counter upon receiving a new code. However, researchers found that the counter in Honda vehicles resynchronizes when the vehicle receives consecutive lock/unlock commands, causing the vehicle to accept codes from a previous session that should have been deemed invalid. An attacker equipped with software-defined radio equipment can intercept a sequence of codes and replay them later to unlock the vehicle and start its engine. **Recommendations** For Honda Civic 2012, consider disabling the keyless access feature until a patch is available. For Honda X-RV 2018, restrict access to the keyfob subsystem to minimize the risk of exploitation. For Honda C-RV 2020, avoid using the keyless access feature in areas with high radio interference. For Honda Accord 2020, Honda Odyssey 2020, Honda Inspire 2021, Honda Fit 2022, Honda Civic 2022, Honda VE-1 2022, and Honda Breeze 2022, temporarily disable the keyless access feature until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Audi A7 MMI Multiplayer version (N+R CN AU P0395) **Description** The Bluetooth stack in Audi A7 MMI Multiplayer mishandles `%x` and `%s` format string specifiers in a device name, potentially leading to memory content leaks and service crashes. **Recommendations** For version (N+R CN AU P0395), consider disabling the Bluetooth functionality until a patch is available to prevent potential memory content leaks and service crashes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tesla Model 3 vehicles (affected versions not specified) **Description** The issue allows attackers to open a door by leveraging access to a legitimate key card and then using NFC Relay. The vendor has developed Pin2Drive to mitigate this issue. **Recommendations** For Tesla Model 3 vehicles, consider enabling Pin2Drive to mitigate the issue of unauthorized door access.