CVE-2024-6347: Unauthorized access to ECU functionality

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-15 · updated 2026-06-17
Weakness: CWE-285

Description

* Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima (2022) allows attackers to trigger denial-of-service (DoS) by unauthorized access to the ECU's programming session. * No preconditions implemented for ECU management functionality through UDS session in the Blind Spot Detection Sensor ECU in Nissan Altima (2022) allows attackers to disrupt normal ECU operations by triggering a control command without authentication.

Affected products

Nissan-Global Blind Spot Detection Sensor Ecu Firmware: all versions

References

https://asrg.io/security-advisories/CVE-2024-6347

Get alerted when CVE-2024-6347 or the next vulnerability affects your stack