PT-2022-17755 · Suzuki · Suzuki Connect

Nikhil Bogam · Published 2022-03-29 · Updated 2022-04-07 · CVE-2022-26269

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Suzuki Connect version 1.0.15

Description The issue allows attackers to tamper with displayed messages via spoofed CAN messages.

Recommendations For Suzuki Connect version 1.0.15, consider restricting access to the CAN bus to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2022-26269

Affected Products

Suzuki Connect

References · 7

• 🔥 https://github.com/nsbogam/CVE-2022-26269/blob/main/README.md · Exploit
• https://osv.dev/vulnerability/CVE-2022-26269 · Vendor Advisory
• https://marutisuzuki.com/corporate/technology/suzuki-connect · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26269 · Security Note
• https://marutisuzuki.com · Vendor Advisory
• https://t.me/cvenotify/28572 · Telegram Post
• https://t.me/cibsecurity/39709 · Telegram Post