CVE-2024-6348mediumCWE-330

CVE-2024-6348: medium-severity vulnerability in Nissan Altima

Predictable seed generation after ECU reset

Published

Follow this CVE+ Monitor Altima

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.4%
Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima (2022) allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/V:D/RE:H
Affected products
Nissan · Altima
Related CVEs — Nissan Altima

In the same product, most dangerous first.

CVE-2024-6347MEDIUMUnauthorized access to ECU functionalityEPSS 0.3%