6.8
CVSSv3

CVE-2023-28895

Published: 01/12/2023 Updated: 06/12/2023
CVSS v3 Base Score: 6.8 | Impact Score: 5.9 | Exploitability Score: 0.9
VMScore: 0

Vulnerability Summary

The password for access to the debugging console of the PoWer Controller chip (PWC) of the MIB3 infotainment is hard-coded in the firmware. The console allows attackers with physical access to the MIB3 unit to gain full control over the PWC chip. Vulnerability found on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

preh mib3_firmware