CVE-2023-28910: Disabled Abortion Flag
A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled abortion flag eventually leading to bypassing assertion functions. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the referenced resources.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28910?
CVE-2023-28910 has been assessed as having a high severity due to its potential impact on vehicle security.
How do I mitigate CVE-2023-28910?
To mitigate CVE-2023-28910, it is recommended to update the MIB3 infotainment system software to the latest version provided by Skoda.
Which vehicles are affected by CVE-2023-28910?
CVE-2023-28910 primarily affects the Skoda Superb III equipped with the MIB3 infotainment system.
What type of vulnerability is CVE-2023-28910?
CVE-2023-28910 is a security flaw in the Bluetooth stack of the MIB3 infotainment system.
Can CVE-2023-28910 be exploited remotely?
Yes, CVE-2023-28910 can potentially be exploited remotely, allowing unauthorized access to the vehicle's systems.