CVE-2023-6073

Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of the VW Group with the same hardware) and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls.

CVSS v3 6.3 MEDIUM

6.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.1 / Impact : 4.2

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-ivi-ecu/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:volkswagen:id.3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:volkswagen:id.3:-:*:*:*:*:*:*:*

History

18 Nov 2023, 03:21

Type	Values Removed	Values Added
CPE		cpe:2.3:o:volkswagen:id.3_firmware:::::::: cpe:2.3:h:volkswagen:id.3:-:::::::*
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.3
First Time		Volkswagen id.3 Volkswagen id.3 Firmware Volkswagen
References	~~() https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-ivi-ecu/ -~~	() https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-ivi-ecu/ - Exploit, Third Party Advisory
CWE		NVD-CWE-noinfo

10 Nov 2023, 08:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-11-10 08:15

Updated : 2024-02-28 20:54

NVD link : CVE-2023-6073

Mitre link : CVE-2023-6073

CVE.ORG link : CVE-2023-6073

JSON object : View

Products Affected

volkswagen

id.3
id.3_firmware

CWE

NVD-CWE-noinfo CWE-20

Improper Input Validation

CWE-284

Improper Access Control

{"id": "CVE-2023-6073", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 2.1}, {"type": "Secondary", "source": "cve@asrg.io", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.1}]}, "published": "2023-11-10T08:15:08.100", "references": [{"url": "https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-ivi-ecu/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@asrg.io"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "cve@asrg.io", "description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of the VW Group with the same hardware) and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls.\n"}, {"lang": "es", "value": "El atacante puede realizar un ataque de Denegaci\u00f3n de Servicio para bloquear la ECU ICAS 3 IVI en un Volkswagen ID.3 (y otros veh\u00edculos del Grupo VW con el mismo hardware) y falsificar comandos de configuraci\u00f3n de volumen para activar irreversiblemente el volumen de audio al m\u00e1ximo a trav\u00e9s de llamadas REST API."}], "lastModified": "2023-11-18T03:21:23.573", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:volkswagen:id.3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EF1065C-EB08-4BBC-A418-E6DB0AD322B5", "versionEndExcluding": "3.2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:volkswagen:id.3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FDFD418D-C4AB-4797-86E4-98462AF5C938"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@asrg.io"}