Security Advisory

CVE-2023-6073

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-11-10 07:32:16

Last updated 2025-02-27 20:34:00

Assigner ASRG

CVSS score 5.7

State PUBLISHED

Description

Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of the VW Group with the same hardware) and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls.

← Browse all CVEs View on cve.org ↗