CVE-2024-6348

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima (2022) allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-330

Affected software

No affected versions have been published.

Timeline

Published: Aug 19, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-63506.5A malformed 802.15.4 packet causes a buffer overflow to occur leading to an assert and a denial of service. A watchdog reset clears the erro CVE-2024-63514.3A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert CVE-2024-63524.3A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert CVE-2024-63536.5The Wallet for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'search[value]' parameter in all versions up to, and CVE-2024-63547.2Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user CVE-2024-63554.3A vulnerability was found in Genexis Tilgin Fiber Home Gateway HG1522 CSx000-01_09_01_12. It has been declared as problematic. Affected by t CVE-2024-63564.4An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and star CVE-2024-63578.8Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence.CVE-2024-63588.8Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence.CVE-2024-63599.8Privilege escalation vulnerability identified in OpenText ArcSight Intelligence.CVE-2024-63609.8Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and result in unauthori CVE-2024-63615.4Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane. The vulnerability affects all version prior to vers