CVE-2024-6347

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

* Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima (2022) allows attackers to trigger denial-of-service (DoS) by unauthorized access to the ECU's programming session. * No preconditions implemented for ECU management functionality through UDS session in the Blind Spot Detection Sensor ECU in Nissan Altima (2022) allows attackers to disrupt normal ECU operations by triggering a control command without authentication.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-285CWE-306

Affected software

VendorProductVersions
NissanAltima—

References

Timeline

Published
Aug 15, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-63487.5Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima (2022) allows aCVE-2024-63506.5A malformed 802.15.4 packet causes a buffer overflow to occur leading to an assert and a denial of service. A watchdog reset clears the erroCVE-2024-63514.3A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assertCVE-2024-63524.3A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assertCVE-2024-63536.5The Wallet for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'search[value]' parameter in all versions up to, and CVE-2024-63547.2Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated userCVE-2024-63554.3A vulnerability was found in Genexis Tilgin Fiber Home Gateway HG1522 CSx000-01_09_01_12. It has been declared as problematic. Affected by tCVE-2024-63564.4An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starCVE-2024-63578.8Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence.CVE-2024-63588.8Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence.CVE-2024-63599.8Privilege escalation vulnerability identified in OpenText ArcSight Intelligence.CVE-2024-63609.8Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and result in unauthori