Lucene search
PRIOn knowledge basePRION:CVE-2023-29389HistoryApr 05, 2023 - 4:15 p.m.
Code injection
2023-04-0516:15:00
PRIOn knowledge base
www.prio-n.com
8
toyota rav4
2021
can bus
code injection
vulnerability
unauthorized driving
nvd
attackers
Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged “Key is validated” messages via CAN Injection, as exploited in the wild in (for example) July 2022.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rav4_firmware | eq | 2021 |
Related
nvd
nvd
CVE-2023-29389
2023-04-05 16:15:08
cve
cve
CVE-2023-29389
2023-04-05 16:15:08
cvelist
cvelist
CVE-2023-29389
2023-04-05 00:00:00
trellix
trellix
The Bug Report – April 2023 Edition
2023-05-03 00:00:00
The Bug Report – April 2023 Edition
2023-05-03 00:00:00