1. Home
  2. CVE Database
  3. CVE-2023-28899
MEDIUM · 4.7

CVE-2023-28899

By sending a specific reset UDS request via OBDII port of Skoda vehicles, it is possible to cause vehicle engine shutdown and denial of service of other vehicle components even when the vehicle is mov...

Vulnerability Description

By sending a specific reset UDS request via OBDII port of Skoda vehicles, it is possible to cause vehicle engine shutdown and denial of service of other vehicle components even when the vehicle is moving at a high speed. No safety critical functions affected. 

CVSS Score

4.7

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
Skoda-AutoSuperb 3 Firmware-
Skoda-AutoSuperb 3-

Related Weaknesses (CWE)

CWE-770

References

FAQ

What is CVE-2023-28899?

CVE-2023-28899 is a vulnerability with a CVSS score of 4.7 (MEDIUM). By sending a specific reset UDS request via OBDII port of Skoda vehicles, it is possible to cause vehicle engine shutdown and denial of service of other vehicle components even when the vehicle is mov...

How severe is CVE-2023-28899?

CVE-2023-28899 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-28899?

Check the references section above for vendor advisories and patch information. Affected products include: Skoda-Auto Superb 3 Firmware, Skoda-Auto Superb 3.