CVE-2023-28897 | HackTesting

The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.

Credits

Artem Ivachev (PCAutomotive)

References

https://asrg.io/security-advisories/cve-2023-28897