CVE-2025-32056CWE-1241

Anti-Theft Bypass for Infotainment ECU

Medium · published January 22, 2026

CVSS v3.1
4.0
EPSS
0%
Percentile
18.9
In the wild
Unconfirmed
What it is

The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection.

First identified on Nissan Leaf ZE1 manufactured in 2020.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00275 · 18.9th percentile
Weakness
CWE-1241 · Use of Predictable Algorithm in Random Number Generator
Published
2026-01-22T15:21Z
EPSS history
Timeline
  • 22 JAN 15:21Z
    Anti-Theft Bypass for Infotainment ECU
    cvelistv5