Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cfx8-xj8g-9hv3

Опубликовано: 31 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.2
CVSS3: 8.3

Описание

By manipulating the Signal Level Attenuation Characterization (SLAC) protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close proximity, via electromagnetic induction.

By manipulating the Signal Level Attenuation Characterization (SLAC) protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close proximity, via electromagnetic induction.

EPSS

Процентиль: 4%
0.00018
Низкий

7.2 High

CVSS4

8.3 High

CVSS3

Дефекты

CWE-923

Связанные уязвимости

CVSS3: 8.3
nvd
3 месяца назад

By manipulating the Signal Level Attenuation Characterization (SLAC) protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close proximity, via electromagnetic induction.

EPSS

Процентиль: 4%
0.00018
Низкий

7.2 High

CVSS4

8.3 High

CVSS3

Дефекты

CWE-923