CVEvulnerability

CVE-2025-32056

4.0 MEDIUM Published 2026-01-22 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2026-01-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.0 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Weaknesses
CWE-1241

Description

The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection. First identified on Nissan Leaf ZE1 manufactured in 2020.

Related

Weakness · CWE (1)

  • CWE-1241 Use of Predictable Algorithm in Random Number Generator weakness

References