PT-2025-16332 · Bosch · Infotainment System Ecu

Polina Smirnova · Published 2025-04-15 · Updated 2026-01-22 · CVE-2025-32056

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nissan Leaf versions manufactured in 2020

Description The anti-theft protection mechanism can be bypassed due to weak response generation algorithms for the head unit. Attackers can reveal all 32 corresponding responses by sniffing CAN traffic or pre-calculating the values, allowing them to bypass the protection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1241

Related Identifiers

CVE-2025-32056

Affected Products

Infotainment System Ecu

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-32056 · Security Note
• https://twitter.com/CVEnew/status/2014366266782269583 · Twitter Post
• https://nissan.co.uk/vehicles/new-vehicles/leaf.html · Note
• https://reddit.com/r/u_Geblitztde/comments/1jzpzfq/gef%C3%A4hrliche_sicherheitsl%C3%BCcke_hacker_k%C3%B6nnen_autos · Reddit Post
• http://i.blackhat.com/Asia-25/Asia-25-Evdokimov-Remote-Exploitation-of-Nissan-Leaf.pdf · Note
• https://t.me/purp_sec/618 · Telegram Post
• https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-nissan-infotainment-manufactured-by-bosch · Note