CVE-2024-6348

5.3 mediumEPSS 0.4%

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima (2022) allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/V:D/RE:H

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-330
Published: 2024-08-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nissan-global:blind_spot_protection_sensor_ecu_firmware

References

https://asrg.io/security-advisories/

Check your stack JSON