PT-2024-37557 · Nissan · Nissan Altima Blind Spot Protection Sensor Ecu

Thomas Sermpinis · Published 2024-08-19 · Updated 2024-08-30 · CVE-2024-6348

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nissan Altima (2022) Blind Spot Protection Sensor ECU

Description The issue concerns predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU. This predictability allows attackers to forecast the requested seeds and bypass security controls by repeatedly resetting the ECU and requesting seeds.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2024-6348

Affected Products

Nissan Altima Blind Spot Protection Sensor Ecu

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-6348 · Security Note
• https://twitter.com/VulmonFeeds/status/1825607821267767305 · Twitter Post
• https://twitter.com/cracbot/status/1826862052285223368 · Twitter Post
• https://t.me/cvedetector/3522 · Telegram Post
• https://twitter.com/cr0wtom/status/1829532353733197900 · Twitter Post
• https://asrg.io/security-advisories · Note
• https://twitter.com/cracbot/status/1827224392541012145 · Twitter Post
• https://twitter.com/CVEnew/status/1825556072599298420 · Twitter Post