CVE-2023-28897

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware.

Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

VendorProductVersions
JOYNEXTMIB3 Infotainment Unit<= 0304

References

Timeline

Published
Jan 12, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-288985.3The Real-Time Streaming Protocol implementation in the MIB3 infotainment incorrectly handles requests to /logs URI, when the id parameter eqCVE-2023-288995.5By sending a specific reset UDS request via OBDII port of Skoda vehicles, it is possible to cause vehicle engine shutdown and denial of servCVE-2023-289005.3The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda CVE-2023-289015.3The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle milCVE-2023-289023.3An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cauCVE-2023-289033.3An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to causCVE-2023-289045.2A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical accCVE-2023-289058.0A heap buffer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker to execute arbitrary code on it. The CVE-2023-289067.8A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the system to escalate priviCVE-2023-289076.7There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the main operating systCVE-2023-289085.4A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper validation of user-supCVE-2023-289098.0A specific flaw exists within the Bluetooth stack of the MIB3 unit. The issue results from the lack of proper validation of user-supplied da
CVE-2023-28897: Critical severity, CVSS 9.8 | Vulnix