Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-6347 EUVD-2024-47459GHSA-qm84-v26j-7pch

Unauthorized access to ECU functionality

Published Aug 15, 2024 · Updated Aug 15, 2024 · Assigned by ASRG

Description

* Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima (2022) allows attackers to trigger denial-of-service (DoS) by unauthorized access to the ECU's programming session.
* No preconditions implemented for ECU management functionality through UDS session in the Blind Spot Detection Sensor ECU in Nissan Altima (2022) allows attackers to disrupt normal ECU operations by triggering a control command without authentication.

Affected products

VendorProductAffectedFixed
Nissan Altima — —

References