CVE Catalog

CVE-2023-34733

MediumCVSS 6.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.51%

39th percentile - higher than 39% of all known CVEs

Summary

A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service (DoS) via supplying crafted media files when connecting a device to the vehicle's USB plug and play feature.

Risk Assessment

A DoS attack can disrupt the infotainment system's operation, affecting the comfort and safety of vehicle users.

Recommendation

It is recommended to update the infotainment system software to the latest version that includes fixes for exception handling.

Original NVD description (English source)

A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service (DoS) via supplying crafted media files when connecting a device to the vehicle's USB plug and play feature.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS