Access Control Vulnerability in KIA Seltos Instrument Cluster
CVE-2024-51074

6.7MEDIUM

Key Information:

Vendor

KIA

Status
Seltos
Vendor
CVE Published:
22 November 2024

What is CVE-2024-51074?

A vulnerability exists in the KIA Seltos vehicle's instrument cluster version 1.0, allowing unauthorized modification of odometer readings through an unsecured CAN network. The concerns were raised regarding the potential for attackers to alter data that could impact vehicle integrity. However, the supplier disputes the risk due to the CAN bus being internally managed and not externally accessible, along with the nature of the findings arising from tests in a controlled environment not representative of an actual vehicle.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://en.wikipedia.org/wiki/CAN_bus
https://github.com/nitinronge91/KIA-SELTOS-Cluster-Vulner...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.