Skip to content
OpenAdvisories
Critical ICSA-24-093-01 3 CVEs

IOSIX IO-1020 Micro ELD

Published Apr 2, 2024 · Updated Apr 2, 2024

Vendor: IOSiX Product: IO-1020 Micro ELD

Summary

Successful exploitation of these vulnerabilities could allow an adjacent attacker to take control of vehicle systems by connecting to and modifying the affected device.

Vulnerabilities 3

  • Critical 9.6
    CVE-2024-28878

    IOSIX IO-1020 Micro ELD Download of Code Without Integrity Check

    IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code.

    IOSiX IO-1020 Micro ELD
  • High 7.4
    CVE-2024-30210

    IOSIX IO-1020 Micro ELD Use of Default Credentials

    IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device.

    IOSiX IO-1020 Micro ELD
  • High 7.4
    CVE-2024-31069

    IOSIX IO-1020 Micro ELD Use of Default Credentials

    IO-1020 Micro ELD web server uses a default password for authentication.

    IOSiX IO-1020 Micro ELD

Revision history

  1. #1

    Initial Publication

References