CVE-2023-28902: Denial of Service via integer underflow in picserver
An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause denial-of-service of the infotainment system. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the referenced resources.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28902?
CVE-2023-28902 is considered a high severity vulnerability due to its potential to cause denial-of-service in the MIB3 infotainment system.
How do I fix CVE-2023-28902?
The mitigation for CVE-2023-28902 involves applying a firmware update provided by Skoda for the MIB3 infotainment unit.
Who is affected by CVE-2023-28902?
CVE-2023-28902 affects the Skoda Superb III vehicles equipped with the MIB3 infotainment unit.
What type of attack is associated with CVE-2023-28902?
CVE-2023-28902 can be exploited by an attacker with local access to the vehicle, leading to a denial-of-service attack on the infotainment system.
Can CVE-2023-28902 be exploited remotely?
No, CVE-2023-28902 requires local access to the vehicle to exploit the vulnerability.