What’s Vulnerable › Vulnerabilities

CVE-2023-33281

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-22 · updated 2026-06-17
• Weakness: CWE-294

Description

The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in the exploit demonstration does not match any technology that Nissan provides to customers.

Affected products

• Nissan Sylphy Classic 2021 Firmware: all versions

References

• https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html
• https://twitter.com/Kevin2600/status/1658059570806415365
• https://www.youtube.com/watch?v=GG1utSdYG1k
• https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html
• https://twitter.com/Kevin2600/status/1658059570806415365
• https://www.youtube.com/watch?v=GG1utSdYG1k

Get alerted when CVE-2023-33281 or the next vulnerability affects your stack