Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gfp3-9j64-8w7j

Опубликовано: 14 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.9
CVSS3: 5.4

Описание

ZF Roll Stability Support Plus (RSSPlus) is vulnerable to an authentication bypass vulnerability targeting deterministic RSSPlus SecurityAccess service seeds, which may allow an attacker to remotely (proximal/adjacent with RF equipment or via pivot from J2497 telematics devices) call diagnostic functions intended for workshop or repair scenarios. This can impact system availability, potentially degrading performance or erasing software, however the vehicle remains in a safe vehicle state.

ZF Roll Stability Support Plus (RSSPlus) is vulnerable to an authentication bypass vulnerability targeting deterministic RSSPlus SecurityAccess service seeds, which may allow an attacker to remotely (proximal/adjacent with RF equipment or via pivot from J2497 telematics devices) call diagnostic functions intended for workshop or repair scenarios. This can impact system availability, potentially degrading performance or erasing software, however the vehicle remains in a safe vehicle state.

EPSS

Процентиль: 10%
0.00036
Низкий

5.9 Medium

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-305

Связанные уязвимости

CVSS3: 5.4
nvd
12 месяцев назад

ZF Roll Stability Support Plus (RSSPlus) is vulnerable to an authentication bypass vulnerability targeting deterministic RSSPlus SecurityAccess service seeds, which may allow an attacker to remotely (proximal/adjacent with RF equipment or via pivot from J2497 telematics devices) call diagnostic functions intended for workshop or repair scenarios. This can impact system availability, potentially degrading performance or erasing software, however the vehicle remains in a safe vehicle state.

EPSS

Процентиль: 10%
0.00036
Низкий

5.9 Medium

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-305