CVE-2024-21454
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2024-21454 is a newly disclosed vulnerability affecting Automotive Telematics systems. The issue stems from a transient Denial of Service (DoS) condition during the decoding process of the ToBeSignedMessage. A malicious actor could potentially exploit this vulnerability by sending specially crafted messages to trigger the DoS condition. This could result in service interruption or system crashes, impacting the availability and reliability of critical automotive functions. Organizations using the affected Automotive Telematics systems are advised to apply patches or mitigations promptly to neutralize the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.