CVE-2023-33070
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 5, 2023
Updated: Apr 12, 2024
CWE ID 287
Summary
CVE-2023-33070 is a Transient Denial of Service (DoS) vulnerability affecting an Automotive Operating System. The issue arises due to insufficient authentication checks on secure Input/Output (I/O) calls, allowing unauthorized access. An attacker can exploit this weakness to cause temporary disruptions in system functionality, potentially impacting critical vehicle operations. The vulnerability poses a significant risk, particularly in safety-critical systems, and requires immediate attention from vendors for a patch or mitigation strategy.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.