PT-2023-24266 · Nissan · Nissan Sylphy Classic

Kevin Chen · Published 2023-05-22 · Updated 2024-08-02 · CVE-2023-33281

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Nissan Sylphy Classic version 2021

Description The remote keyfob system sends the same RF signal for each door-open request, allowing for a replay attack. The vendor claims this issue cannot be reproduced with genuine Nissan parts, citing a mismatch in the technology used in the exploit demonstration.

Recommendations For Nissan Sylphy Classic version 2021, consider restricting access to the door handle and keyfob system to minimize the risk of exploitation. As a temporary workaround, avoid using the remote keyfob system for door-open requests until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2023-33281

Affected Products

Nissan Sylphy Classic

References · 6

• 🔥 https://twitter.com/Kevin2600/status/1658059570806415365 · Exploit
• 🔥 https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html · Exploit
• 🔥 https://youtube.com/watch?v=GG1utSdYG1k · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-33281 · Security Note
• https://t.me/cvenotify/88575 · Telegram Post
• https://t.me/cvenotify/85290 · Telegram Post