Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
A flaw in tftp-hpa's in.tftpd remap engine can cause out-of-bounds read and write operations when it processes a specially crafted inverse remap rule with a non-empty custom error message. A remote, unauthenticated attacker could send a crafted request to crash the daemon, resulting in a denial of service. This could be relevant where tftp-hpa is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
Zephyr's MQTT-SN client contains a NULL pointer dereference that crashes or panics the device when a connected gateway stops responding to keepalive messages, a condition a malicious or compromised gateway can trigger remotely over unauthenticated UDP. The impact is a remotely triggerable denial of service affecting availability only, with no attacker-controlled data written. This could be relevant where Zephyr is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
HAProxy versions 3.3.0 through 3.4.4 and 3.5-dev1 through 3.5-dev5 contain a flaw that can occur when HAProxy is built with QUIC support and configured with an HTTP/3 frontend that forwards traffic to a backend over HTTP/1.1 using chunked transfer coding on a reused connection. Under those conditions, a remote unauthenticated attacker can cause HTTP request smuggling on reused backend connections, potentially bypassing frontend rules such as path-based deny rules and causing other clients' requests, including Authorization headers, to be lost; exploitation is not deterministic but can be retried freely. This could be relevant where HAProxy is deployed in automotive systems, for example as a load balancer or gateway in connected-vehicle, fleet, or EV-charging backends. Confirm applicability through the product SBOM or dependency inventory.
Suricata, a network intrusion detection and prevention system, has a flaw in its DNP3 protocol handling that could let crafted network traffic cause excessive memory use and potentially a denial of service. The issue is fixed in versions 7.0.16 and 8.0.5, and disabling DNP3 or limiting reassembly depth can work around it. This could be relevant where Suricata is deployed in automotive systems, for example in vehicle network monitoring or automotive manufacturing environments. Confirm applicability through the product SBOM or dependency inventory.
This advisory covers multiple vulnerabilities in GLib, a core software library. The most serious issue allows an unauthenticated attacker to send excessively long data streams to the GDBus component, causing denial of service through memory and CPU exhaustion, potentially crashing or hanging the system. Other flaws involve minor out-of-bounds reads that can cause small information disclosures or denial of service, and one issue allows a malicious D-Bus server to trick a client into reading arbitrary files. GLib is a general-purpose library, so this could be relevant where GLib is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
The advisory describes a high-severity vulnerability in the Smart Polling feature of Nozomi Networks' Guardian/CMC products (before version 26.3.0) and Arc (before version 2.7.0). This feature establishes encrypted connections to target devices but fails to validate the remote host's certificate or host key, and there is no option to enable such validation. An attacker could potentially exploit this by impersonating a target device during these connections, undermining the security of the encrypted communication. Since these are industrial cybersecurity monitoring products used in operational technology environments, this could be relevant where they are deployed in automotive manufacturing or related industrial settings; confirm applicability through the product SBOM or dependency inventory.
A heap overflow vulnerability exists in the a2dp_decoder_sbc.cpp component of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier, which an attacker could exploit by sending a crafted L2CAP packet to cause a Denial of Service (DoS). The advisory does not confirm automotive deployment, but this could be relevant where the BES2300 SoC is used in automotive Bluetooth audio systems. Confirm applicability through the product SBOM or dependency inventory.
The advisory reports a SQL injection vulnerability in the Vehicle Management System version 1.0 from code-projects, specifically in the file /busprofile.php. An attacker can remotely manipulate the "busid" argument to inject malicious SQL code, and the exploit has been publicly disclosed. The advisory does not state a severity rating, but the technical impact is that an attacker could potentially access or alter database information through this flaw.
free5GC is an open-source implementation of the 5G core network, and in version 1.4.4 and earlier, its AUSF component has a vulnerability where concurrent authentication requests for the same subscriber can overwrite the stored authentication context. An attacker with access to the AUSF interface could exploit this to cause authentication failures for a targeted subscriber, denying them service. This could be relevant where free5GC is deployed in automotive systems, such as for vehicle-to-network communications; confirm applicability through the product SBOM or dependency inventory.
A flaw in rsyslog allows an unauthenticated remote attacker to trigger a heap buffer overflow in the RainerScript replace() function by sending specially crafted syslog messages, leading to memory corruption and a denial of service. This affects multiple Red Hat Enterprise Linux versions. This could be relevant where rsyslog is deployed in automotive systems, as it is a generic logging component; confirm applicability through the product SBOM or dependency inventory.
The Bendix EC80 Brake ECU, used in the transportation systems sector in the United States and Canada, has multiple vulnerabilities. An attacker could exploit a stack-based buffer overflow or out-of-bounds write to crash the ECU, remotely execute arbitrary code, or inject CAN bus traffic, potentially causing loss of ABS, steering assist, speedometer, and shifting functions. Additionally, hard-coded credentials could allow an attacker to disable automatic traction control, with no known public exploitation reported at this time.
This advisory addresses a denial-of-service vulnerability in python-pyasn1, a Python library for ASN.1 data processing, where a specially crafted data value can cause excessive CPU and memory use, hanging applications that decode and then print, log, or compare untrusted data. The issue is fixed in version 0.6.4, and the severity is not explicitly stated in the advisory. This could be relevant where python-pyasn1 is deployed in automotive systems for processing ASN.1 data, such as in telematics or diagnostic protocols, but the advisory does not confirm automotive use; confirm applicability through the product SBOM or dependency inventory.
This advisory addresses a denial-of-service vulnerability in the Python pyasn1 library, where specially crafted ASN.1 data can cause excessive CPU and memory consumption, potentially hanging applications that decode and process untrusted data. The issue is fixed in version 0.6.4, and the severity is not explicitly stated in the advisory. This could be relevant where pyasn1 is deployed in automotive systems for processing serialized data, but the advisory does not confirm automotive use; confirm applicability through the product SBOM or dependency inventory.
This advisory addresses a denial-of-service vulnerability in python-pyasn1, a generic ASN.1 library for Python, prior to version 0.6.4. An attacker can exploit a specially crafted BER, CER, or DER encoded REAL value with a large exponent to cause excessive CPU and memory consumption, hanging applications that decode and then print, log, or compare untrusted ASN.1 data. This could be relevant where python-pyasn1 is deployed in automotive systems for processing ASN.1 data, such as in telematics or diagnostic protocols, and the severity is not explicitly rated in the advisory. Confirm applicability through the product SBOM or dependency inventory.
Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 contain a null pointer dereference vulnerability in the X.509IF protocol dissector, which can cause the application to crash and result in a denial of service when processing specially crafted network traffic. This could be relevant where Wireshark is deployed in automotive systems for network analysis or diagnostics, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
The advisory describes an out-of-bounds write vulnerability in Wireshark's RRC protocol dissector, affecting versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18, which can cause a crash and lead to a denial of service. An attacker could exploit this by crafting malicious network traffic to crash the application. This could be relevant where Wireshark is deployed in automotive systems for network analysis or diagnostics, but the advisory does not confirm automotive use; confirm applicability through the product SBOM or dependency inventory.
Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 contain a stack-based buffer overflow in the C12.22 protocol dissector, which can be exploited to crash the application, resulting in a denial of service. This could be relevant where Wireshark is deployed in automotive systems for network analysis or diagnostics, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
This security update addresses multiple vulnerabilities in GLib, a software library used for handling data structures and system functions. The flaws could allow an attacker to cause denial-of-service conditions through memory or CPU exhaustion, crash the application, or disclose small amounts of sensitive data, with one issue enabling file exfiltration via a malicious D-Bus server. The advisory does not confirm automotive deployment, so this could be relevant where GLib is used in automotive systems; confirm applicability through the product SBOM or dependency inventory.
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically the Siemens License Server (SLS) software used to manage software licenses for engineering and production tools. An attacker could exploit these flaws to gain full administrative control of the server or remotely read sensitive files, potentially disrupting vehicle production or stealing proprietary manufacturing data. Siemens has released a patched version, and updating the software is strongly recommended to protect plant operations.
This vulnerability affects the real-time operating system Zephyr, which is deployed in vehicle ECUs, ADAS controllers, and body control modules, specifically within its UpdateHub OTA agent used for firmware updates. An attacker controlling or intercepting the update server can send malformed metadata that causes a NULL-pointer dereference, crashing or resetting the device. This is a remotely triggerable denial-of-service flaw limited to availability, with no data corruption or theft, and the fix validates metadata before processing.
This vulnerability affects the CAN bus / automotive Ethernet network that connects ECUs within vehicles, as gopacket is a packet processing library used in automotive diagnostic tools and network monitoring systems. An attacker can send a specially crafted network packet to a system using gopacket, causing it to crash and deny service, which could disrupt vehicle diagnostics or fleet management operations. The severity is high because the attack requires no authentication and can be triggered remotely, though it primarily impacts backend tools rather than the vehicle itself.
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically several Endress+Hauser products accessible via ethernet. A remote unauthenticated attacker could exploit this flaw to change the device's IP address through the SopasET interface, potentially causing a Denial of Service that disrupts production or monitoring. While no public exploits are known, the risk is significant enough that manufacturers should immediately restrict network access to these devices.
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically Endress+Hauser and SICK MSC800 devices used for process automation and measurement. A remote unauthenticated attacker can modify the device's IP address through the SopasET interface, potentially causing a Denial of Service that could disrupt production line operations. While no public exploits exist yet, the severity is significant for automotive plants relying on these devices, and no complete remediation is available beyond restricting network access and upgrading to the latest firmware versions.
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically Murrelektronik Profinet devices that ship with default SNMP community names 'public' and 'private'. An unauthenticated attacker with network access to these devices can read sensitive configuration data and potentially modify device settings, which could disrupt production line operations or alter the behavior of connected industrial processes. The severity is significant because no vendor fix is available until early 2027 for most products, leaving automotive plants reliant on network segmentation and access controls to prevent exploitation.
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically Murrelektronik network-enabled devices used in production environments. An attacker can exploit the SNMP service to amplify traffic by up to 100x and launch denial-of-service attacks against third parties, while also potentially degrading the device's responsiveness for legitimate production traffic. The vulnerability is rated as high severity because it requires no authentication and can be triggered remotely over the network, though a firmware fix is not expected until early 2027.