Privilege Escalation in MIB3 Infotainment Unit for Skoda and Volkswagen Vehicles

CVE-2023-29113

What is CVE-2023-29113?

The MIB3 infotainment units in specific Skoda and Volkswagen vehicles lack proper privilege separation in their inter-process communication system. This oversight allows an attacker with internal access to bypass operating system-level access controls, potentially compromising the integrity and security of the vehicle's systems. The vulnerability poses a significant risk as it can be exploited to manipulate vehicle functions or access sensitive data.

References