CVE-2022-38766

8.1 highEPSS 0.7%

High (8.1) in renault zoe e-tech firmware. EPSS 0.7% chance of exploitation in the next 30 days.

The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for each door-open request, which allows for a replay attack.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-294
Published: 2023-01-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

renault:zoe_e-tech_firmware

References

https://github.com/AUTOCRYPT-IVS-VnV/CVE-2022-38766
https://github.com/AUTOCRYPT-IVS-VnV/CVE-2022-38766

Check your stack JSON