CVE-2023-28897 — Hard-coded password for UDS services

CVE-2023-28897

Hard-coded password for UDS services PUBLISHED

Description (CNA)

The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.

Affected (CNA)

Vendor / product	Versions
JOYNEXT / MIB3 Infotainment Unit	affected 0 through 0304

CWE

CWE-798

References

https://asrg.io/security-advisories/cve-2023-28897

ADP enrichment

CVE

No English description supplied.

https://asrg.io/security-advisories/cve-2023-28897

CISA-ADP

No English description supplied.

No references supplied.