CVE-2023-28899

Denial of Service via ECU reset service

Medium · published January 12, 2024

CVSS v3.1
4.7
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

By sending a specific reset UDS request via OBDII port of Skoda vehicles, it is possible to cause vehicle engine shutdown and denial of service of other vehicle components even when the vehicle is moving at a high speed. No safety critical functions affected.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00138 · 2.9th percentile
Published
2024-01-12T16:32Z
EPSS history
Timeline
  • 12 JAN 16:32Z
    Denial of Service via ECU reset service
    cvelistv5