Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2023-28897

Hard-coded password for UDS services

Description

The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

JOYNEXT MIB3 Infotainment Unit

Default version status: unaffected

  • 0 to ≤ 0304affected

References