PT-2022-24558 · Renault · Renault Zoe

Published 2022-08-29 · Updated 2023-01-10 · CVE-2022-38766

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Renault ZOE version 2021

Description The remote keyless system sends 433.92 MHz RF signals from the same Rolling Codes set for each door-open request, which allows for a replay attack.

Recommendations For Renault ZOE version 2021, consider implementing a secure rolling code mechanism to prevent replay attacks, or restrict access to the vehicle's keyless system until a secure update is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2022-38766

Affected Products

Renault Zoe

References · 8

• 🔥❌ https://github.com/AUTOCRYPT-RED/CVE-2022-38766 · Exploit, Deleted
• 🔥❌ https://github.com/AUTOCRYPT-IVS-VnV/CVE-2022-38766 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2022-38766 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38766 · Security Note
• https://t.me/cybersecuritytechnologies/6693 · Telegram Post
• https://t.me/cvenotify/41199 · Telegram Post
• https://t.me/cibsecurity/55807 · Telegram Post
• https://t.me/pentestingnews/27427 · Telegram Post