Approved changes feed: RSS · Atom

cpe:2.3:o:vw:polo_firmware:2019:*:*:*:*:*:*:*

part: o version: 2019 update: *

VendorVw (290ca635-e2e4-5bfa-815d-35a046b786fd)
ProductPolo Firmware (18dff2f5-1b74-52b8-a105-9ab577f35de7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-28656 vulnerable 2026-06-08 05:23:56.349705 Details available
The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainment system and executed as root.
Published: 2020-11-16T03:55:09.000Z
Updated: 2024-08-04T16:40:59.805Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.