CVE-2023-28910

8.0 highEPSS 0.4%

High (8.0). EPSS 0.4% chance of exploitation in the next 30 days.

A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled abortion flag eventually leading to bypassing assertion functions. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the referenced resources.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-754
Published: 2025-06-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://asrg.io/security-advisories/vulnerabilities-in-volkswagen-mib3-infotainment-part-2/
https://i.blackhat.com/EU-24/Presentations/EU-24-Parnishchev-OverTheAirVW.pdf
https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-vw-mib3-infotainment-2

Check your stack JSON