CVE-2025-32056— Anti-Theft Bypass for Infotainment ECU
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-32056
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Anti-Theft Bypass for Infotainment ECU
Source: NVD (National Vulnerability Database)
Vulnerability Description
The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection. First identified on Nissan Leaf ZE1 manufactured in 2020.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1241
Source: NVD (National Vulnerability Database)
Vulnerability Title
Bosch Infotainment ECU 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Bosch Infotainment ECU是德国Bosch公司的一个车载娱乐系统。 Bosch Infotainment ECU存在安全漏洞，该漏洞源于防盗保护机制因响应生成算法弱而可被绕过，可能导致保护机制失效。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Bosch | Infotainment system ECU | 283C30861E | - |
II. Public POCs for CVE-2025-32056
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-32056
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Infotainment system ECU
- CVE-2025-32063
Enabling SSH server on Infotainment ECU - CVE-2025-32062
Stack Buffer Overflow leading to RCE in Bluetooth stack of I - CVE-2025-32061
Stack Buffer Overflow leading to RCE in Bluetooth stack of I - CVE-2025-32060
Absence of Kernel Module Signature Verification on Linux Sys - CVE-2025-32059
Stack Buffer Overflow leading to RCE in Bluetooth stack of I
Same vendor: Bosch
- CVE-2024-33618
Bosch VMS Central Server 安全漏洞 - CVE-2025-32063
Enabling SSH server on Infotainment ECU - CVE-2025-32062
Stack Buffer Overflow leading to RCE in Bluetooth stack of I - CVE-2025-32061
Stack Buffer Overflow leading to RCE in Bluetooth stack of I - CVE-2025-32060
Absence of Kernel Module Signature Verification on Linux Sys
Same weakness: CWE-1241
- CVE-2026-6420
Keylime: keylime: security bypass due to hardcoded tpm quote - CVE-2025-13079
Popup Builder - Create highly converting, mobile friendly ma - CVE-2023-4695
Use of Predictable Algorithm in Random Number Generator in p - CVE-2021-3692
Use of Predictable Algorithm in Random Number Generator in y - CVE-2021-3689
Use of Predictable Algorithm in Random Number Generator in y
V. Comments for CVE-2025-32056
No comments yet