CVE-2018-9314 — MEDIUM (6.8)

Vulnerability Description

The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical access.

CVSS Score

6.8

MEDIUM

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Bmw	Head Unit Hu Nbt Firmware	-
Bmw	Head Unit Hu Nbt	-

Related Weaknesses (CWE)

CWE-693

References

http://www.securityfocus.com/bid/104258Third Party AdvisoryVDB Entry
https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KExploitThird Party Advisory
https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/Third Party Advisory
http://www.securityfocus.com/bid/104258Third Party AdvisoryVDB Entry
https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KExploitThird Party Advisory
https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/Third Party Advisory

FAQ

What is CVE-2018-9314?

CVE-2018-9314 is a vulnerability with a CVSS score of 6.8 (MEDIUM). The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who...

How severe is CVE-2018-9314?

CVE-2018-9314 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-9314?

Check the references section above for vendor advisories and patch information. Affected products include: Bmw Head Unit Hu Nbt Firmware, Bmw Head Unit Hu Nbt.