CVE-2024-6245CWE-1392

Default Credentials in ssh service for SmartPlay in Maruti Suzuki

High · published October 28, 2024

CVSS v3.1
7.4
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market.

This issue affects SmartPlay: 66T0.05.50.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2024-10-28T16:42Z
EPSS history
Timeline
  • 28 OCT 16:42Z
    Default Credentials in ssh service for SmartPlay in Maruti Suzuki
    cvelistv5