CVE-2023-28901 — Trip Data Disclosure from Backend

CVE-2023-28901

Trip Data Disclosure from Backend PUBLISHED

Description (CNA)

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other information of Skoda Connect service users by specifying an arbitrary vehicle VIN number.

Affected (CNA)

Vendor / product	Versions
Skoda Auto / Skoda Connect	affected 0

CWE

CWE-200

References

https://asrg.io/security-advisories/cve-2023-28901/

ADP enrichment

CVE

No English description supplied.

https://asrg.io/security-advisories/cve-2023-28901/

CISA-ADP

No English description supplied.

No references supplied.