Volkswagen Mib3 Infotainment System Mib3 Oi Mqb
Approved changes feed: RSS · Atom
cpe:2.3:a:preh_car_connect_gmbh_(joynext_gmbh):volkswagen_mib3_infotainment_system_mib3_oi_mqb:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Preh Car Connect Gmbh (Joynext Gmbh) (efc175e9-83b1-576f-b1b2-a945cc61feac) |
|---|---|
| Product | Volkswagen Mib3 Infotainment System Mib3 Oi Mqb (f5f0a9af-e34d-5084-aad3-fe2455e39f30) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-29113 |
vulnerable | 2026-06-08 06:02:38.739850 |
A lack of access control in custom IPC mechanism
MEDIUM (6.3)
The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the proprietary inter-process communication mechanism, leaving attackers with presence in the system an ability to undermine access control restrictions implemented at the operating system level.
The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the referenced resources.
Published: 2025-06-28T15:33:26.500Z
Updated: 2025-06-30T16:04:36.932Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28912 |
vulnerable | 2026-06-08 06:02:36.624642 |
Cleartext Phonebook Information
MEDIUM (5.7)
The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution privilege on the system or physical access to the system to obtain vehicle owner's contact data.
The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the referenced resources.
Published: 2025-06-28T15:33:58.714Z
Updated: 2025-06-30T15:05:14.568Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28911 |
vulnerable | 2026-06-08 06:02:36.624378 |
Arbitrary Channel Disconnection Resulting in Denial of Service
MEDIUM (6.5)
A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper validation of user-supplied data, which can result in an arbitrary channel disconnection. An attacker can leverage this vulnerability to cause a denial-of-service attack for every connected client of the infotainment device.
The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the referenced resources.
Published: 2025-06-28T15:34:25.867Z
Updated: 2025-06-30T15:08:00.610Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28910 |
vulnerable | 2026-06-08 06:02:36.624023 |
Disabled Abortion Flag
HIGH (8)
A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled abortion flag eventually leading to bypassing assertion functions.
The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the referenced resources.
Published: 2025-06-28T15:34:50.755Z
Updated: 2025-06-30T15:09:53.450Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28909 |
vulnerable | 2026-06-08 06:02:36.623668 |
Integer Overflow Leading to MTU Bypass
HIGH (8)
A specific flaw exists within the Bluetooth stack of the MIB3 unit. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow when receiving fragmented HCI packets on a channel. An attacker can leverage this vulnerability to bypass the MTU check on a channel with enabled fragmentation. Consequently, this can lead to a buffer overflow in upper layer profiles, which can be used to obtain remote code execution.
The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the referenced resources.
Published: 2025-06-28T15:35:21.590Z
Updated: 2025-06-30T19:21:12.865Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28908 |
vulnerable | 2026-06-08 06:02:36.623315 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28907 |
vulnerable | 2026-06-08 06:02:36.623036 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28906 |
vulnerable | 2026-06-08 06:02:36.622670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28905 |
vulnerable | 2026-06-08 06:02:36.622308 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28904 |
vulnerable | 2026-06-08 06:02:36.621938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28903 |
vulnerable | 2026-06-08 06:02:36.621635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28902 |
vulnerable | 2026-06-08 06:02:36.621179 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.