ASRG

Latest CVEs · RSS

• CVE-2026-49319 2026-06-25 · CVSS 6.5
  Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack
• CVE-2026-49318 2026-05-29 · CVSS 2.4
  Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network att
• CVE-2026-49317 2026-05-29 · CVSS 2.4
  Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network att
• CVE-2026-49316 2026-05-29 · CVSS 4.6
  Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass
• CVE-2026-49325 2026-05-29 · CVSS 4.6
  Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker wi
• CVE-2026-49324 2026-05-29 · CVSS 4.6
  Uncontrolled resource consumption in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network a
• CVE-2026-49323 2026-05-29 · CVSS 4.3
  Weak authentication between the Wireless Control Module (WCM) and the Engine Control Module (ECM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year a
• CVE-2026-49322 2026-05-29 · CVSS 4.3
  Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with r
• CVE-2026-2541 2026-02-15 · CVSS 6.4
  The Micca KE700 system relies on a 6-bit portion of an identifier for authentication within rolling codes, providing only 64 possible combinations. This low ent
• CVE-2026-2540 2026-02-15 · CVSS 8.4
  The Micca KE700 system contains flawed resynchronization logic and is vulnerable to replay attacks. This attack requires sending two previously captured codes i
• CVE-2026-2539 2026-02-15 · CVSS 5.7
  The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool (e.g., SDR) can c
• CVE-2025-32063 2026-02-15 · CVSS 6.8
  There is a misconfiguration vulnerability inside the Infotainment ECU manufactured by BOSCH. The vulnerability happens during the startup phase of a specific sy
• CVE-2025-32062 2026-02-15 · CVSS 8.8
  The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of p
• CVE-2025-32061 2026-02-15 · CVSS 8.8
  The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of p
• CVE-2025-32060 2026-02-15 · CVSS 6.7
  The system suffers from the absence of a kernel module signature verification. If an attacker can execute commands on behalf of root user (due to additional vul
• CVE-2025-32059 2026-02-15 · CVSS 8.8
  The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of p
• CVE-2025-32058 2026-02-15 · CVSS 9.3
  The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interface through a custom
• CVE-2025-32057 2026-01-22 · CVSS 6.5
  The Infotainment ECU manufactured by Bosch which is installed in Nissan Leaf ZE1 – 2020 uses a Redbend service for over-the-air provisioning and updates. HTTPS
• CVE-2025-32056 2026-01-22 · CVSS 4.0
  The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 c
• CVE-2025-6785 2025-09-04 · CVSS 4.7
  Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control
• CVE-2025-7020 2025-08-09 · CVSS 5.1
  An incorrect encryption implementation vulnerability exists in the system log dump feature of BYD's DiLink 3.0 OS (e.g. in the model ATTO3). An attacker with ph
• CVE-2023-28902 2025-06-28 · CVSS 3.3
  An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause denial-of-service
• CVE-2023-28903 2025-06-28 · CVSS 3.3
  An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-servic
• CVE-2023-28904 2025-06-28 · CVSS 5.2
  A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical access to the MIB3 ECU
• CVE-2023-28905 2025-06-28 · CVSS 8.0
  A heap buffer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker to execute arbitrary code on it. The vulnerability was or