CVE-2024-21454
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2024-21454 is a newly disclosed vulnerability affecting Automotive Telematics systems. The issue stems from a transient Denial of Service (DoS) condition during the decoding process of the ToBeSignedMessage. A malicious actor could potentially exploit this vulnerability by sending specially crafted messages to trigger the DoS condition. This could result in service interruption or system crashes, impacting the availability and reliability of critical automotive functions. Organizations using the affected Automotive Telematics systems are advised to apply patches or mitigations promptly to neutralize the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions