CVE-2024-12054CWE-305

ZF Roll Stability Support Plus (RSSPlus) Authentication Bypass By Primary Weakness

Medium · published February 13, 2025

CVSS v4.0
5.9
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

ZF Roll Stability Support Plus (RSSPlus)

is vulnerable to an authentication bypass vulnerability targeting

deterministic RSSPlus SecurityAccess service seeds, which may allow an

attacker to remotely (proximal/adjacent with RF equipment or via pivot

from J2497 telematics devices) call diagnostic functions intended for

workshop or repair scenarios. This can impact system availability,

potentially degrading performance or erasing software, however the

vehicle remains in a safe vehicle state.

The record
Technical detail
CVSS v4.0
5.9 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
EPSS
0.00238 · 14.0th percentile
Weakness
CWE-305 · Authentication Bypass by Primary Weakness
Published
2025-02-13T22:08Z
EPSS history
Timeline
  • 13 FEB 22:08Z
    ZF Roll Stability Support Plus (RSSPlus) Authentication Bypass By Primary Weakness
    cvelistv5