VULNERABILITY INTELLIGENCE

CVE-2024-6347

CVSS score6.5 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2024-08-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

* Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima (2022) allows attackers to trigger denial-of-service (DoS) by unauthorized access to the ECU's programming session. * No preconditions implemented for ECU management functionality through UDS session in the Blind Spot Detection Sensor ECU in Nissan Altima (2022) allows attackers to disrupt normal ECU operations by triggering a control command without authentication.

Weakness classification

  • cve@asrg.io: CWE-285
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references