CVE-2024-6347 — Unauthorized access to ECU functionality

CVE-2024-6347

Unauthorized access to ECU functionality PUBLISHED

Description (CNA)

* Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima (2022) allows attackers to trigger denial-of-service (DoS) by unauthorized access to the ECU's programming session. * No preconditions implemented for ECU management functionality through UDS session in the Blind Spot Detection Sensor ECU in Nissan Altima (2022) allows attackers to disrupt normal ECU operations by triggering a control command without authentication.

Affected (CNA)

Vendor / product	Versions
Nissan / Altima	unknown Altima 2022

CWE

CWE-285, CWE-306

References

https://asrg.io/security-advisories/CVE-2024-6347

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.