Skip to content
OpenAdvisories

Vendor

Škoda Auto

1 known vulnerabilities.

Products

Škoda Connect 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-28900

    Nickname Disclosure on the Backend Automotive Server

    The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number.

    Škoda Auto Škoda Connect