CVE-2024-6348

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima (2022) allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@asrg.io

Published

2024-08-19

Last modified

2024-08-19

Weaknesses

CWE-330

Affected products

• Altima (Nissan)
• Blind Spot Protection Sensor Ecu Firmware (Nissan-global)

References

• https://asrg.io/security-advisories/