← back
CVE-2023-28903

CVE-2023-28903

CVSS 3.3 LOWEPSS 0.2%CWE-190
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 3.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
28 Jun 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Preh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://asrg.io/security-advisories/vulnerabilities-in-volkswagen-mib3-infotainment-part-2/https://i.blackhat.com/EU-24/Presentations/EU-24-Parnishchev-OverTheAirVW.pdfhttps://pcacybersecurity.com/resources/advisory/vulnerabilities-in-vw-mib3-infotainment-2