Executive Summary

Informations
Name CVE-2023-28907 First vendor Publication 2025-06-28
Vendor Cve Last vendor Modification 2025-06-30

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the main operating system to compromise the CPU core responsible for CAN message processing. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the referenced resources.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28907

Sources (Detail)

https://asrg.io/security-advisories/vulnerabilities-in-volkswagen-mib3-infota...
https://i.blackhat.com/EU-24/Presentations/EU-24-Parnishchev-OverTheAirVW.pdf
https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-vw-mib3-in...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
Date Informations
2025-07-01 00:20:35
  • Multiple Updates
2025-06-28 21:20:33
  • First insertion