1. Home
  2. CVE Database
  3. CVE-2023-28901
MEDIUM · 5.3

CVE-2023-28901

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other...

Vulnerability Description

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other information of Skoda Connect service users by specifying an arbitrary vehicle VIN number.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Skoda-AutoSkoda Connect-

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2023-28901?

CVE-2023-28901 is a vulnerability with a CVSS score of 5.3 (MEDIUM). The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other...

How severe is CVE-2023-28901?

CVE-2023-28901 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-28901?

Check the references section above for vendor advisories and patch information. Affected products include: Skoda-Auto Skoda Connect.