CVE-2018-9311

Опубликовано: 31 мая 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.

Ссылки

http://www.securityfocus.com/bid/104258
Third Party Advisory
VDB Entry
https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf
Exploit
Third Party Advisory
https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/
Third Party Advisory
http://www.securityfocus.com/bid/104258
Third Party Advisory
VDB Entry
https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf
Exploit
Third Party Advisory
https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:bmw:telematics_control_unit_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:bmw:telematics_control_unit:-:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00838

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-693

Связанные уязвимости

GHSA-2qr9-8w8c-wvq4