Toyota Rav4 -
Approved changes feed: RSS · Atom
cpe:2.3:h:toyota:rav4:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Toyota (61d790c8-65f6-52d6-be8e-83ba2d18f78a) |
|---|---|
| Product | Rav4 (5cb67b26-6635-5bd5-ba86-8d6143076a5c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-29389 |
not_vulnerable | 2026-06-08 06:02:40.110212 |
Details available
Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is validated" messages via CAN Injection, as exploited in the wild in (for example) July 2022.
Published: 2023-04-05T00:00:00.000Z
Updated: 2025-02-12T16:12:07.270Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.