CNNVD-202506-3642 Information

CNNVD ID

CNNVD-202506-3642

CVE-2023-29113

  • CNNVD Published: 2025-06-28

Description (Chinese)

Volkswagen MIB3 Infotainment是德国大众汽车(Volkswagen)公司的一款汽车上的信息娱乐系统。 Volkswagen MIB3 Infotainment存在安全漏洞,该漏洞源于专有进程间通信机制缺乏权限分离,可能导致攻击者绕过操作系统级别的访问控制限制。

Description (English)

Volkswagen MIB3 Information is an information and entertainment system in a car owned by Volkswagen. There is a security gap in Volkswagen MIB3 Information, which stems from the lack of separation of competences of the proprietary inter-process communication mechanism, which could lead the attackers to bypass access control restrictions at the operating system level.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

大众汽车

Published

2025-06-28

Last Modified

2026-02-24

References

https://asrg.io/security-advisories/vulnerabilities-in-volkswagen-mib3-infotainment-part-2/ https://i.blackhat.com/EU-24/Presentations/EU-24-Parnishchev-OverTheAirVW.pdf https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-vw-mib3-infotainment-2 https://access.redhat.com/security/cve/cve-2023-29113

Patch

https://www.volkswagen.co.uk/en.html

Share on: