CVE Catalog

CVE-2023-39075

MediumCVSS 4.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.45%

35th percentile - higher than 35% of all known CVEs

Summary

The infotainment system in Renault Zoe EV 2021 vehicles in versions from 283C35202R to 283C35519R is vulnerable to attacks that can crash the system by sending arbitrary USB data via a USB device.

Risk Assessment

Attackers can remotely crash the infotainment system, potentially leading to disruptions in vehicle operation and reducing the comfort and safety of the driver and passengers.

Recommendation

It is recommended to update the infotainment system to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R (builds 11.10.2021 to 16.01.2023) allows attackers to crash the infotainment system by sending arbitrary USB data via a USB device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS