Approved changes feed: RSS · Atom

cpe:2.3:h:preh:mib3:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorPreh (3d049746-2fa0-52ba-a041-a855ad9c378b)
ProductMib3 (259a23f2-7e38-523c-900e-f92cb9c1eb68)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28896 not_vulnerable 2026-06-08 06:02:36.607691 Weak encoding for password in UDS services
LOW (3.3)
Access to critical Unified Diagnostics Services (UDS) of the Modular Infotainment Platform 3 (MIB3) infotainment is transmitted via Controller Area Network (CAN) bus in a form that can be easily decoded by attackers with physical access to the vehicle. Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.
Published: 2023-12-01T14:01:05.877Z
Updated: 2024-08-02T13:51:38.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28895 not_vulnerable 2026-06-08 06:02:36.606968 Hard-coded password for access to power controller chip memory
LOW (3.5)
The password for access to the debugging console of the PoWer Controller chip (PWC) of the MIB3 infotainment is hard-coded in the firmware. The console allows attackers with physical access to the MIB3 unit to gain full control over the PWC chip. Vulnerability found on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.
Published: 2023-12-01T13:41:16.581Z
Updated: 2024-12-02T17:48:05.077Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.