PT-2022-23693 · Mazda · Mazda Vehicles

Levente Csikor · Published 2022-08-24 · Updated 2022-08-31 · CVE-2022-36945

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mazda vehicles (affected versions not specified)

Description The issue concerns the Remote Keyless Entry (RKE) receiving unit, which allows remote attackers to perform unlock operations and force a resynchronization after capturing three consecutive valid key-fob signals over the radio. This is known as a RollBack attack, enabling the attacker to retain the ability to unlock indefinitely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2022-36945

Affected Products

Mazda Vehicles

References · 8

• 🔥 https://blackhat.com/us-22/briefings/schedule/#rollback---a-new-time-agnostic-replay-attack-against-the-automotive-remote-keyless-entry-systems-27185 · Exploit
• 🔥 https://youtube.com/playlist?list=PLYodcy84oQL1gxwiuRm13xRXxTQL9cO5t · Exploit
• 🔥 https://hackaday.com/2022/08/17/rollback-breaks-into-your-car · Exploit
• 🔥 https://medium.com/codex/rollback-a-new-time-agnostic-replay-attack-against-the-automotive-remote-keyless-entry-systems-df5f99ba9490 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-36945 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36945 · Vendor Advisory
• https://pcmag.com/news/is-your-car-key-fob-vulnerable-to-this-simple-replay-attack · Note
• https://t.me/cibsecurity/48627 · Telegram Post