What’s Vulnerable › Vulnerabilities

CVE-2024-12054: ZF Roll Stability Support Plus (RSSPlus) Authentication Bypass By Primary Weakness

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-13 · updated 2026-06-17
• Weakness: CWE-305

Description

ZF Roll Stability Support Plus (RSSPlus) is vulnerable to an authentication bypass vulnerability targeting deterministic RSSPlus SecurityAccess service seeds, which may allow an attacker to remotely (proximal/adjacent with RF equipment or via pivot from J2497 telematics devices) call diagnostic functions intended for workshop or repair scenarios. This can impact system availability, potentially degrading performance or erasing software, however the vehicle remains in a safe vehicle state.

Affected products

• ZF RSSPlus 2M: from 01/08 before 01/23 — fixed in 01/23

How to fix

Upgrade to a fixed version: ZF RSSPlus 2M 01/23. Check the vendor advisory for mitigations.

References

• https://nmfta.org/wp-content/media/2022/11/Actionable_Mitigations_Options_v9_DIST.pdf
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-03

Get alerted when CVE-2024-12054 or the next vulnerability affects your stack