PT-2023-26776 · Renault · Renault Zoe Ev

Published 2023-08-03 · Updated 2023-12-12 · CVE-2023-39075

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R

Description The issue allows attackers to crash the infotainment system by sending arbitrary USB data via a USB device.

Recommendations For versions 283C35202R to 283C35519R, as a temporary workaround, consider restricting the use of USB devices with the infotainment system until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-39075

Affected Products

Renault Zoe Ev

References · 7

• 🔥 https://blog.jhyeon.dev/posts/vuln/202307/renault-zoe · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-39075 · Security Note
• https://osv.dev/vulnerability/CVE-2023-39075 · Vendor Advisory
• https://t.me/cvenotify/63277 · Telegram Post
• https://t.me/cibsecurity/67719 · Telegram Post
• https://blog.dhjeong.kr/posts/automotive/2023/12/how-to-fuzzing-realcars · Note
• https://blog.dhjeong.kr/posts/vuln/202307/renault-zoe · Note