Skip to content
OpenAdvisories

Vendor

JOYNEXT

4 known vulnerabilities.

Products

MIB3 Infotainment Unit 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-28898

    Head Unit Denial-of-Service via Apple CarPlay service

    The Real-Time Streaming Protocol implementation in the MIB3 infotainment incorrectly handles requests to /logs URI, when the id parameter equals to zero. This issue allows an attacker connected to the in-vehicle Wi-Fi network to cause denial-of-service of the…

    JOYNEXT MIB3 Infotainment Unit
  • Medium 4.0
    CVE-2023-28897

    Hard-coded password for UDS services

    The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.

    JOYNEXT MIB3 Infotainment Unit