{"vulnerability": "CVE-2022-27254", "sightings": [{"uuid": "00b63d58-04ce-4aa2-8850-b4be9d22e460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1706", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254)\nURL\uff1ahttps://github.com/nonamecoder/CVE-2022-27254\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-03-23T15:39:22.000000Z"}, {"uuid": "1ca3b8c6-4dfd-4f4b-9975-e52614704553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/technical_private_cat/247", "content": "\u041f\u0440\u0438\u0432\u0435\u0442, \u043c\u043e\u0438 \u041c\u0435\u0440\u0440\u0438 \u044d\u043d \ud83d\udc2d\ud83e\udde9\n\n\u0425\u043e\u0447\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0430\u043c \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-27254. \ud83d\ude97\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Honda \u0438 Acura\n\n\u0412 \u043d\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0438 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u043f\u0438\u0440\u0430\u043d\u0438\u044e, \u043e\u0442\u043f\u0438\u0440\u0430\u043d\u0438\u044e, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043e\u043a\u043d\u0430\u043c\u0438, \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044e \u0431\u0430\u0433\u0430\u0436\u043d\u0438\u043a\u0430 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0434\u0432\u0438\u0433\u0430\u0442\u0435\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\n\n\u0410\u0442\u0430\u043a\u0430 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0434\u0438\u043e\u0447\u0430\u0441\u0442\u043e\u0442\u043d\u044b\u0435 \u0441\u0438\u0433\u043d\u0430\u043b\u044b \u0441 \u0432\u0430\u0448\u0435\u0433\u043e \u0431\u0440\u0435\u043b\u043e\u043a\u0430, \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0445, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0431\u0435\u0437 \u043a\u043b\u044e\u0447\u0430 \u0432\u0430\u0448\u0435\u0433\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 CVE-2022-27254, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0430\u0442\u0430\u043a\u0443 MitM \u0438\u043b\u0438, \u0442\u043e\u0447\u043d\u0435\u0435, \u0430\u0442\u0430\u043a\u0443 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0420\u0427-\u0441\u0438\u0433\u043d\u0430\u043b\u044b, \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0435\u043b\u043a\u0430 \u0432 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c. \n\u041f\u043e\u0442\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0445, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c \u043f\u043e \u0436\u0435\u043b\u0430\u043d\u0438\u044e.\n\u041f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0441\u0438\u0433\u043d\u0430\u043b\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441 FOB, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0445\u043e\u0442\u044c \u043a\u0430\u043a\u043e\u0439-\u0442\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c, \u043b\u043e\u043b\ud83d\ude36\u200d\ud83c\udf2b\ufe0f. \n\u0415\u0441\u043b\u0438 \u0446\u0435\u043b\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0441\u0432\u043e\u044e \u043c\u0430\u0448\u0438\u043d\u0443, \u0432\u0441\u0435, \u0447\u0442\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u2014 \u044d\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0435\u0435 \u0441\u0438\u0433\u043d\u0430\u043b \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0435\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u0442\u0443 \u0436\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0440\u0435\u0430\u043a\u0446\u0438\u044e \u043c\u0430\u0448\u0438\u043d\u044b.\n\nHonda \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043d\u0430\u043c, \u0447\u0442\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0430\u0432\u0442\u043e\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0438 \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438, \u0438 \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \"\u0440\u0435\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438 \u043e\u0447\u0435\u043d\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0445 \u0432\u043e\u0440\u043e\u0432\".\n\n\"\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0431\u043b\u0438\u0437\u043e\u0441\u0442\u0438 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u044b \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u043e\u043c\u0443 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0443, \u0447\u0442\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0435\u043c\u0430 \u0440\u0430\u0434\u0438\u043e\u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u043e\u0442 \u0431\u0440\u0435\u043b\u043a\u0430 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u043a\u043e\u0433\u0434\u0430 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0438 \u0437\u0430\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e\u0431\u043b\u0438\u0437\u043e\u0441\u0442\u0438\"\n\n\u041e\u0431\u0440\u0430\u0442\u0438\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0432 \u0441\u0432\u043e\u0435\u043c \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438 Honda \u043f\u0440\u044f\u043c\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0438 \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044c, \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0438 Honda \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0433\u043e \u0442\u0438\u043f\u0430 \u0430\u0442\u0430\u043a.\n\u0418 \u043a\u0430\u043a \u0432\u044b \u043f\u043e\u043d\u0438\u043c\u0430\u0439\u0442\u0435 \u043e\u043d\u0438 \u043d\u0435 \u0441\u0438\u043b\u044c\u043d\u043e \u0433\u043e\u0440\u044f\u0442 \u0436\u0435\u043b\u0430\u043d\u0438\u0435\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u044d\u0442\u043e. \n\n\u0410 \u043d\u0430 \u044d\u0442\u043e\u043c \u0432\u0441\u0435, \u0431\u0443\u0434\u044c\u0442\u0435 \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u0435\u0435 \u0441 \u0432\u0430\u0448\u0438\u043c\u0438 \u0430\u0432\u0442\u043e. \ud83d\ude98\n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 poc \u0438 \u0441\u0442\u0430\u0442\u044c\u0438 \u043f\u0440\u043e \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0422\u044b\u043a \n\u0422\u044b\u043a \n\u0422\u044b\u043a \n\u0422\u044b\u043a \n\u0422\u044b\u043a\n\n\u0421\u043f\u0430\u0441\u0438\u0431\u043e \u0437\u0430 \u043f\u0440\u043e\u0447\u0442\u0435\u043d\u0438\u0435\u2764\ufe0f\n\u0418 \u043f\u043e\u043c\u043d\u0438\u0442\u0435: \u041c\u043b\u0430\u0434\u0435\u043d\u0435\u0446 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0430\u0447\u0430\u0435\u0442 \u0433\u0435\u0440\u0446\u043e\u0433\u0438\u043d\u044f \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u043f\u043e\u0440\u043e\u0441\u0435\u043d\u043e\u043a \ud83d\udc37\n#car  #attacks #cve #exploit #news", "creation_timestamp": "2022-10-16T14:48:43.000000Z"}, {"uuid": "55e3a6d8-7498-472d-92c1-d726ec363e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/ics_cert/563", "content": "\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0642\u0641\u0644 \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0647\u0648\u0646\u062f\u0627 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0647 \u0648 \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u0646\u062f. \n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u0631\u0648\u062f \u0628\u062f\u0648\u0646 \u06a9\u0644\u06cc\u062f \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647\u200c\u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u0628\u0631 \u062f\u06cc\u06af\u0631 \u062e\u0648\u062f\u0631\u0648\u0647\u0627 \u0648 \u0645\u062f\u0644\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0647\u0648\u0646\u062f\u0627 \u062a\u0623\u062b\u06cc\u0631 \u0628\u06af\u0630\u0627\u0631\u062f\n\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u062e\u06cc\u0631\u0627\u064b \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0628\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0686\u0646\u062f\u06cc\u0646 \u0645\u062f\u0644 \u062e\u0648\u062f\u0631\u0648\u06cc \u0647\u0648\u0646\u062f\u0627 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0647 \u0648 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u0646\u062f.\n 10 \u0645\u062f\u0644 \u0627\u0632 \u0645\u062d\u0628\u0648\u0628\u200c\u062a\u0631\u06cc\u0646 \u0645\u062f\u0644\u200c\u0647\u0627\u06cc \u0647\u0648\u0646\u062f\u0627 \u0631\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0645\u0639\u0631\u0641\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0628\u062f\u062a\u0631 \u0627\u0632 \u0647\u0645\u0647\u060c \u06cc\u0627\u0641\u062a\u0647\u200c\u0647\u0627\u06cc \u0641\u0639\u0644\u06cc \u0645\u062d\u0642\u0642\u0627\u0646 \u0631\u0627 \u0628\u0647 \u0627\u06cc\u0646 \u0628\u0627\u0648\u0631 \u0645\u06cc\u200c\u0631\u0633\u0627\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0631 \u062a\u0645\u0627\u0645 \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0647\u0648\u0646\u062f\u0627 \u0627\u0632 \u0633\u0627\u0644 2012 \u062a\u0627 2022 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u0627\u0646 RollingPWN \u0646\u0627\u0645\u06cc\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f\u060c \u0627\u0632 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u062c\u0632\u0627\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0648\u0631\u0648\u062f \u0628\u062f\u0648\u0646 \u06a9\u0644\u06cc\u062f \u0647\u0648\u0646\u062f\u0627 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f. \u0633\u06cc\u0633\u062a\u0645 \u0648\u0631\u0648\u062f\u06cc \u0641\u0639\u0644\u06cc \u0645\u062a\u06a9\u06cc \u0628\u0647 \u06cc\u06a9 \u0645\u062f\u0644 \u06a9\u062f \u0645\u062a\u062d\u0631\u06a9 \u0627\u0633\u062a \u06a9\u0647 \u0647\u0631 \u0628\u0627\u0631 \u06a9\u0647 \u0635\u0627\u062d\u0628\u0627\u0646 \u062f\u06a9\u0645\u0647 fob \u0631\u0627 \u0641\u0634\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f\u060c \u06cc\u06a9 \u06a9\u062f \u0648\u0631\u0648\u062f\u06cc \u062c\u062f\u06cc\u062f \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f. \u067e\u0633 \u0627\u0632 \u0635\u062f\u0648\u0631\u060c \u0645\u0648\u0627\u0631\u062f \u0642\u0628\u0644\u06cc \u0628\u0627\u06cc\u062f \u063a\u06cc\u0631\u0642\u0627\u0628\u0644 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u0646\u062f \u062a\u0627 \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0645\u062c\u062f\u062f \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0634\u0648\u062f. \u062f\u0631 \u0639\u0648\u0636\u060c \u0645\u062d\u0642\u0642\u0627\u0646 Kevin26000 \u0648 Wesley Li \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0646\u062f \u06a9\u0647 \u06a9\u062f\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc \u0631\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646 \u0628\u0647 \u0639\u0642\u0628 \u0628\u0631\u06af\u0631\u062f\u0627\u0646\u062f \u0648 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0627\u062e\u0648\u0627\u0633\u062a\u0647 \u0628\u0647 \u0648\u0633\u06cc\u0644\u0647 \u0646\u0642\u0644\u06cc\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f.\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0686\u0646\u062f\u06cc\u0646 \u0645\u062f\u0644 \u0647\u0648\u0646\u062f\u0627 \u0627\u0632 \u0633\u0627\u0644 2012 \u062a\u0627 2022 \u0622\u0632\u0645\u0627\u06cc\u0634 \u06a9\u0631\u062f\u0646\u062f. \u0641\u0647\u0631\u0633\u062a \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06cc \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0634\u0627\u0645\u0644 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0627\u0633\u062a:\n  \u0647\u0648\u0646\u062f\u0627 \u0633\u06cc\u0648\u06cc\u06a9 2012\n  \u0647\u0648\u0646\u062f\u0627 XR-V 2018\n  \u0647\u0648\u0646\u062f\u0627 CR-V 2020\n  \u0647\u0648\u0646\u062f\u0627 \u0622\u06a9\u0648\u0631\u062f 2020\n  \u0647\u0648\u0646\u062f\u0627 \u0627\u0648\u062f\u06cc\u0633\u0647 2020\n  \u0647\u0648\u0646\u062f\u0627 \u0627\u06cc\u0646\u0633\u067e\u0627\u06cc\u0631 2021\n  \u0647\u0648\u0646\u062f\u0627 \u0641\u06cc\u062a 2022\n  \u0647\u0648\u0646\u062f\u0627 \u0633\u06cc\u0648\u06cc\u06a9 2022\n  \u0647\u0648\u0646\u062f\u0627 VE-1 2022\n  \u0647\u0648\u0646\u062f\u0627 \u0628\u0631\u06cc\u0632 2022\n\u0628\u0631\u0627\u0633\u0627\u0633 \u0641\u0647\u0631\u0633\u062a \u0648 \u0622\u0632\u0645\u0627\u06cc\u0634\u200c\u0647\u0627\u06cc \u0645\u0648\u0641\u0642\u06cc\u062a\u200c\u0622\u0645\u06cc\u0632 \u0627\u06cc\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u060c Kevin26000 \u0648 Li \u0642\u0648\u06cc\u0627\u064b \u0645\u0639\u062a\u0642\u062f\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0631 \u0647\u0645\u0647 \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0647\u0648\u0646\u062f\u0627 \u0648 \u0646\u0647 \u0641\u0642\u0637 \u062f\u0647 \u0627\u0648\u0644\u06cc\u0647 \u0641\u0647\u0631\u0633\u062a \u0634\u062f\u0647 \u062f\u0631 \u0628\u0627\u0644\u0627 \u062a\u0623\u062b\u06cc\u0631 \u0628\u06af\u0630\u0627\u0631\u062f.\n\n\u0627\u0631\u0627\u0626\u0647 \u0631\u0627\u0647 \u062d\u0644\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0647 \u0627\u0646\u062f\u0627\u0632\u0647 \u062e\u0648\u062f \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0628\u0627\u0634\u062f. \u0647\u0648\u0646\u062f\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0631\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u06cc\u0627\u0646\u200c\u0627\u0641\u0632\u0627\u0631 (OTA) \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u062f\u060c \u0627\u0645\u0627 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u062f\u06cc\u062f\u0647 \u0627\u0632 OTA \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0646\u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u062a\u0639\u062f\u0627\u062f \u0632\u06cc\u0627\u062f \u0648\u0633\u0627\u06cc\u0644 \u0646\u0642\u0644\u06cc\u0647 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 \u0633\u0646\u0627\u0631\u06cc\u0648\u06cc \u0641\u0631\u0627\u062e\u0648\u0627\u0646 \u0631\u0627 \u0628\u0639\u06cc\u062f \u0645\u06cc \u0633\u0627\u0632\u062f.\n\n\u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631\u060c \u062a\u062d\u0642\u06cc\u0642\u0627\u062a \u0628\u0631\u0627\u06cc \u062a\u0639\u06cc\u06cc\u0646 \u0645\u06cc\u0632\u0627\u0646 \u06af\u0633\u062a\u0631\u062f\u06af\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062f\u0627\u0645\u0647 \u062f\u0627\u0631\u062f. \u0628\u0631 \u0627\u0633\u0627\u0633 \u0645\u0627\u0647\u06cc\u062a \u062d\u0645\u0644\u0647\u060c Kevin26000 \u0648 Li \u0628\u0647 \u0634\u062f\u062a \u0645\u0634\u06a9\u0648\u06a9 \u0647\u0633\u062a\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0631 \u0633\u0627\u06cc\u0631 \u062e\u0648\u062f\u0631\u0648\u0633\u0627\u0632\u0627\u0646 \u0646\u06cc\u0632 \u062a\u0623\u062b\u06cc\u0631 \u0628\u06af\u0630\u0627\u0631\u062f.\n\n\u0627\u06cc\u0646 \u06cc\u0627\u0641\u062a\u0647 \u062a\u0646\u0647\u0627 \u06cc\u06a9\u06cc \u062f\u06cc\u06af\u0631 \u0627\u0632 \u06cc\u06a9 \u0633\u0631\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0633\u0631\u06cc \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0647\u0648\u0646\u062f\u0627 \u062f\u0631 \u0633\u0627\u0644 \u062c\u0627\u0631\u06cc \u06a9\u0634\u0641 \u0634\u062f. \u062f\u0631 \u0645\u0627\u0647 \u0645\u0627\u0631\u0633\u060c \u0645\u062d\u0642\u0642\u0627\u0646 \u06cc\u06a9 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0627\u0646\u0633\u0627\u0646 \u062f\u0631 \u0648\u0633\u0637 ( CVE-2022-27254 ) \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u0633\u06cc\u06af\u0646\u0627\u0644\u200c\u0647\u0627\u06cc RF \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0631\u0647\u06af\u06cc\u0631\u06cc \u0648 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0639\u062f\u06cc \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0634\u0648\u0646\u062f. Kevin26000 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062f\u0631 \u0698\u0627\u0646\u0648\u06cc\u0647 2022 \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u062a\u06a9\u0631\u0627\u0631\u06cc \u0645\u0634\u0627\u0628\u0647 ( CVE-2021-46145 ) \u0631\u0627 \u06af\u0632\u0627\u0631\u0634 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f.\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2022-07-10T16:05:39.000000Z"}, {"uuid": "e8b425e0-bef9-4230-8916-99abe348661f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1923", "content": "\u041d\u0435 \u043c\u043e\u0433 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043e\u0439 \u044d\u0442\u0443 CVE-2022-27254(Mitre).\n\u042d\u0442\u0430 CVE \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) 2016-2020 \u0433\u043e\u0434\u043e\u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430. \u0421\u0443\u0442\u044c \u0432 \u0447\u0451\u043c: \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0431\u0435\u0441\u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0441\u0438\u0432\u0438\u043a\u0430\u0445 \u043f\u043e\u0441\u044b\u043b\u0430\u0435\u0442 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0440\u0430\u0434\u0438\u043e\u0447\u0430\u0441\u0442\u043e\u0442\u043d\u044b\u0439 \u0441\u0438\u0433\u043d\u0430\u043b \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0434\u0432\u0435\u0440\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 CVE-2019-20626.\n\n\u0418\u0437 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438(PoC):\n\u2316FCCID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0432\u043e\u0442 \u0438 \u0441\u0430\u043c PoC:       \n\u25b6\ufe0f \u0442\u044b\u043a(github)\n\nI couldn't ignore this CVE-2022-27254 (Mitre).\nThis CVE affects the 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R). The bottom line is this: the keyless access system on Civics sends the same radio frequency signal for each request to open the door, which allows for a repeat attack related to the CVE-2019-20626 problem .\nFrom the arsenal that was required for Proof of Concept(PoC):\n\u2316FCC ID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\nActually, here is the PoC itself:\n\u25b6\ufe0f click(github)\n\n#cve #poc #car #hackrf", "creation_timestamp": "2024-11-06T19:30:33.000000Z"}, {"uuid": "3ec4bb33-634f-45a4-9d32-3f110b424482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/technical_private_cat/248", "content": "Hello, my Merry en \ud83d\udc2d\ud83e\udde9\n\nI want to give you the automotive vulnerability CVE-2022-27254 . \ud83d\ude97\nIt affects some models of Honda and Acura cars.\n\nIn it, an attacker can gain full and unrestricted access to lock, unlock, control windows, open the trunk, and start the engine of the target vehicle\n\nThe attack is this: the attacker intercepts radio frequency signals from your key fob, and re-sends them to gain control of the system without your car key.\n\nRead more CVE-2022-27254, is a MitM attack or, more specifically, a replay attack in which an attacker intercepts RF signals normally sent from a remote key fob to your car. \nThen re-sends them to unlock the car at will.\nSimply capturing the signal sent from the FOB is enough to gain some control over the vehicle, lol\ud83d\ude36\u200d\ud83c\udf2b\ufe0f. \nIf a target locks their car, all it takes is getting their signal and saving it to be able to replay the same command and get an appropriate response from the car.\n\nHonda told us that several automakers are using outdated technology to implement remote locking and unlocking features, and therefore may be vulnerable to \"determined and very technically advanced thieves.\"\n\n\"Currently, the devices seem to work only in close proximity or are physically attached to the target vehicle, requiring local reception of radio signals from the vehicle owner's key fob when the vehicle is opened and started nearby.\"\n\nNote that in its statement, Honda explicitly mentions that it has not verified the information provided by the researchers and cannot confirm whether Honda vehicles are indeed vulnerable to this type of attack.\nAnd as you can understand they're not too keen on fixing it. \n\nAnd that's it, be careful with your autos. \ud83d\ude98\n\nHere are some useful links to various poc and articles about this vulnerability\n\nLink  \nLink  \nLink  \nLink \nLink\n\nThanks for reading\u2764\ufe0f\nAnd remember: The baby the Duchess is rocking is actually a piggy \ud83d\udc37\n#car  #attacks #cve #exploit #news", "creation_timestamp": "2022-10-16T14:48:40.000000Z"}, {"uuid": "bc847fe1-efcf-439a-aeed-8d309fee20d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/q_1xx/4651", "content": "\u0641\u064a\u062f\u064a\u0648 \u062a\u0648\u0636\u064a\u062d \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0641\u064a \u0627\u0644\u0633\u064a\u0627\u0631\u0627\u062a \u0647\u0648\u0627\u0646\u062f\n\n\n \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0647\u0648\u0646\u062f\u0627 \u0641\u064a \u0646\u0638\u0627\u0645 \u0647\u0648\u0646\u062f\u0627 \u0639\u0646 \u0628\u0639\u062f \u0628\u062f\u0648\u0646 \u0645\u0641\u062a\u0627\u062d (CVE-2022-27254)\n\n\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062b\u0627\u0628\u062a\u0629 \u0644\u0641\u062a\u062d \u0623\u064a \u0648\u062c\u0645\u064a\u0639 \u0645\u0646\u0627\u0641\u0630 \u0634\u062d\u0646 \u0645\u0631\u0643\u0628\u0627\u062a Tesla \u0641\u064a \u0627\u0644\u0646\u0637\u0627\u0642!\n\n\u0627\u0644\u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0646\u0634\u0648\u0631\u0627\u062a \n\nhacking yemen\nhttp://t.me/q_1xx", "creation_timestamp": "2025-06-29T08:31:42.000000Z"}, {"uuid": "45a03370-0ceb-45dc-8063-d67f0d26e653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/PentestingShop/285", "content": "\u200b\u200bHackRF One + Portapack H2 Mayhem\n\nThe HackRF is an exceptionally capable software defined radio (SDR) transceiver, but naturally you need to connect it to a computer to actually do anything with it. So the PortaPack was developed to turn it into a stand-alone device with the addition of a touchscreen LCD, a few buttons, and a headphone jack. With all the hardware in place, it\u2019s just a matter of installing a firmware capable enough to do some proper RF hacking on the go.\n\nEnter MAYHEM, an evolved fork of the original PortaPack firmware that the developers claim is the most up-to-date and feature packed version available. Without ever plugging into a computer, this firmware allows you to receive, decode, and re-transmit a dizzying number of wireless protocols. From firing off the seating pagers at a local restaurant to creating a fleet of phantom aircraft with spoofed ADS-B transponders, MAYHEM certainly seems like it lives up to the name.\n\nDetailed blog post about installing and using MAYHEM on the HackRF/PortaPack, complete with a number of real-world examples that show off just a handful of possible applications for the project. Jamming cell phones, sending fake pager messages, and cloning RF remotes is just scratching the surface of what\u2019s possible.\n\nExample of use: exploitation of a Honda vulnerability Honda's Remote Keyless System (CVE-2022-27254)\n\nFirmware to open any and all Tesla vehicle charging ports in range!\n\nBuy online: \n\ud83d\uded2 https://bit.ly/41HS7D3\n\n#radio #RF #SDR", "creation_timestamp": "2023-04-30T17:52:58.000000Z"}, {"uuid": "16b6bf02-4009-472a-9642-67b6a3f7b2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/ShizoPrivacy/112", "content": "\u041d\u0435 \u043c\u043e\u0433 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043e\u0439 \u044d\u0442\u0443 CVE-2022-27254(Mitre)\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) 2016-2020 \u0433\u043e\u0434\u043e\u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430. \u0421\u0443\u0442\u044c \u0432 \u0447\u0451\u043c: \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0431\u0435\u0441\u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0441\u0438\u0432\u0438\u043a\u0430\u0445 \u043f\u043e\u0441\u044b\u043b\u0430\u0435\u0442 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0440\u0430\u0434\u0438\u043e\u0447\u0430\u0441\u0442\u043e\u0442\u043d\u044b\u0439 \u0441\u0438\u0433\u043d\u0430\u043b \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0434\u0432\u0435\u0440\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 CVE-2019-20626.\n\n\u0418\u0437 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438(PoC):\n\u2316FCCID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0432\u043e\u0442 \u0438 \u0441\u0430\u043c PoC:       \n\u25b6\ufe0f \u0442\u044b\u043a\n\nI couldn't ignore this CVE-2022-27254 (Mitre).\nThis vulnerability affects the 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R). The bottom line is this: the keyless access system on Civics sends the same radio frequency signal for each request to open the door, which allows for a repeat attack related to the CVE-2019-20626 problem .\nFrom the arsenal that was required for Proof of Concept(PoC):\n\u2316FCC ID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\nActually, here is the PoC itself:\n\u25b6\ufe0f click\n\n#cve #poc #car #hackrf", "creation_timestamp": "2022-11-03T21:45:14.000000Z"}, {"uuid": "6e8f1c0c-7e6d-414b-8cf6-7e89945b6859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "Telegram/szg74Qm4n38TtnLhVXmcs_KgRO4IWiuPmQYby4jF-2nImw", "content": "", "creation_timestamp": "2022-12-16T18:40:47.000000Z"}, {"uuid": "ea72b0d8-bd9a-41bd-b4a8-2903b97ed413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/q_1xx/2271", "content": "\u0641\u064a\u062f\u064a\u0648 \u062a\u0648\u0636\u064a\u062d \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0641\u064a \u0627\u0644\u0633\u064a\u0627\u0631\u0627\u062a \u0647\u0648\u0627\u0646\u062f\n\n\n \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0647\u0648\u0646\u062f\u0627 \u0641\u064a \u0646\u0638\u0627\u0645 \u0647\u0648\u0646\u062f\u0627 \u0639\u0646 \u0628\u0639\u062f \u0628\u062f\u0648\u0646 \u0645\u0641\u062a\u0627\u062d (CVE-2022-27254)\n\n\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062b\u0627\u0628\u062a\u0629 \u0644\u0641\u062a\u062d \u0623\u064a \u0648\u062c\u0645\u064a\u0639 \u0645\u0646\u0627\u0641\u0630 \u0634\u062d\u0646 \u0645\u0631\u0643\u0628\u0627\u062a Tesla \u0641\u064a \u0627\u0644\u0646\u0637\u0627\u0642!\n\n\u0627\u0644\u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0646\u0634\u0648\u0631\u0627\u062a \n\nhacking yemen\nhttp://t.me/q_1xx", "creation_timestamp": "2022-11-19T15:24:57.000000Z"}, {"uuid": "bf038f66-681a-47f6-b931-5cef700634e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/1291", "content": "HackRF One + Portapack H2 Mayhem.\n\nThe HackRF is an exceptionally capable software defined radio (SDR) transceiver, but naturally you need to connect it to a computer to actually do anything with it. So the PortaPack was developed to turn it into a stand-alone device with the addition of a touchscreen LCD, a few buttons, and a headphone jack. With all the hardware in place, it\u2019s just a matter of installing a firmware capable enough to do some proper RF hacking on the go.\n\nEnter MAYHEM, an evolved fork of the original PortaPack firmware that the developers claim is the most up-to-date and feature packed version available. Without ever plugging into a computer, this firmware allows you to receive, decode, and re-transmit a dizzying number of wireless protocols. From firing off the seating pagers at a local restaurant to creating a fleet of phantom aircraft with spoofed ADS-B transponders, MAYHEM certainly seems like it lives up to the name.\n\nDetailed blog post about installing and using MAYHEM on the HackRF/PortaPack, complete with a number of real-world examples that show off just a handful of possible applications for the project. Jamming cell phones, sending fake pager messages, and cloning RF remotes is just scratching the surface of what\u2019s possible.\n\nExample of use: exploitation of a Honda vulnerability Honda's Remote Keyless System (CVE-2022-27254)\n\nFirmware to open any and all Tesla vehicle charging ports in range!\n\nBuy online: \n\ud83d\uded2 https://alii.pub/6lfodk\n\ud83d\uded2 https://amzn.to/3kRIrFF\n\n#hackrf #radio #sdr #spoofing", "creation_timestamp": "2023-01-30T22:53:50.000000Z"}, {"uuid": "9a770c3b-91a9-4a98-963b-82b0d7d7dab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/SpidrX/797", "content": "\u0641\u064a\u062f\u064a\u0648 \u062a\u0648\u0636\u064a\u062d \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0641\u064a \u0627\u0644\u0633\u064a\u0627\u0631\u0627\u062a \u0647\u0648\u0627\u0646\u062f\n\n\n \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0647\u0648\u0646\u062f\u0627 \u0641\u064a \u0646\u0638\u0627\u0645 \u0647\u0648\u0646\u062f\u0627 \u0639\u0646 \u0628\u0639\u062f \u0628\u062f\u0648\u0646 \u0645\u0641\u062a\u0627\u062d (CVE-2022-27254)\n\n\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062b\u0627\u0628\u062a\u0629 \u0644\u0641\u062a\u062d \u0623\u064a \u0648\u062c\u0645\u064a\u0639 \u0645\u0646\u0627\u0641\u0630 \u0634\u062d\u0646 \u0645\u0631\u0643\u0628\u0627\u062a Tesla \u0641\u064a \u0627\u0644\u0646\u0637\u0627\u0642!", "creation_timestamp": "2022-12-16T18:40:47.000000Z"}, {"uuid": "36a37dfb-8e77-4e76-bbf5-ed65bb08657a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/zero_day_uz/115", "content": "#CVE\n\n\nCVE-2022-27254: PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254)\n\n\n\n\n@zero_day_uz", "creation_timestamp": "2022-06-25T14:45:41.000000Z"}, {"uuid": "f5398c5b-3ed9-4581-897b-a0dd72fbbf56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/NeKaspersky/2047", "content": "\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\u0445 Honda \u0438 Acura, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0433\u043e\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u0430\u0441\u0430\u044e\u0449\u0443\u044e\u0441\u044f \u0443\u0436\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 \u0431\u0440\u0435\u043d\u0434\u043e\u0432 Honda \u0438 Acura. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u0434\u0432\u0435\u0440\u0435\u0439 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0441\u0438\u043b\u043e\u0432\u043e\u0433\u043e \u0430\u0433\u0440\u0435\u0433\u0430\u0442\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u043d\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0440\u044f\u0434\u043e\u043c \u0441 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0441\u0432\u043e\u0439  \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-27254 . \u041e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043e\u043d\u0430 \u043a MitM-\u0430\u0442\u0430\u043a\u0430\u043c(man-in-the-middle \u2014 \u0447\u0435\u043b\u043e\u0432\u0435\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u043f\u0440\u043e\u0441\u0442\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0441\u0438\u0433\u043d\u0430\u043b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0435\u0433\u043e \u043d\u0430 \u0441\u0432\u043e\u0451 \u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0438\u0435. \u041f\u043e \u0441\u0443\u0442\u0438, \u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438 \u043f\u043e \u0441\u0435\u0439 \u0434\u0435\u043d\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043c\u0430\u0440\u043e\u043a. \u0412\u043e\u0440\u044b \u0443\u0433\u043e\u043d\u044f\u044e\u0442 \u0430\u0432\u0442\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u0434\u0433\u0440\u0430\u0431\u0431\u0435\u0440\u044b. \u0421\u0443\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043a\u043e\u0434\u0433\u0440\u0430\u0431\u0431\u0435\u0440\u043e\u0432 \u2013 \u044d\u0442\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0438\u0433\u043d\u0430\u043b\u0430 \u043e\u0442 \u0431\u0440\u0435\u043b\u043e\u043a\u0430, \u0435\u0433\u043e \u0437\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435, \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043a\u0440\u0430\u0436\u0430 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u041d\u043e \u0432\u0435\u0440\u043d\u0451\u043c\u0441\u044f \u043a \u043d\u0430\u0448\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043f\u043e \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043c\u043e\u0434\u0435\u043b\u0438 Civic, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 2016 \u2013 2020 \u0433\u043e\u0434\u043e\u0432. \u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u0442\u0430\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0430\u0446\u0438\u044f\u0445 \u043a\u0430\u043a Type R/Si/EX-L/LX/Touring/EX. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0435 \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u043b\u044c\u0437\u044f \u043d\u0430\u0437\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u043c: \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 HackRF One SDR, \u043d\u043e\u0443\u0442\u0431\u0443\u043a, \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043d\u0430 FCCID.io, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u041f\u041e Gqrx SDR \u0438 \u0442\u0443\u043b\u043a\u0438\u0442 GNURadio.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u0430\u0432\u0442\u043e\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 rolling codes (\u043f\u043b\u0430\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u0434\u044b).  \u0418\u043c\u0438 \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0440\u044f\u0434 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043d\u0430\u0431\u043e\u0440\u043e\u0432 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u042d\u0442\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0445 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c. \u0422\u0430\u043a\u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0438 \u0442\u043e, \u0447\u0442\u043e \u043d\u0430 GitHub \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0446\u0435\u043d\u0435 (\u0434\u043e 5$).\n\n\u0416\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0435\u0448\u0438\u043b\u0438 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0430\u0432\u0442\u043e\u0431\u0440\u0435\u043d\u0434\u0443 Honda \u0437\u0430 \u0440\u0430\u0437\u044a\u044f\u0441\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438. \u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0442\u0430\u043a\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u043e\u0437\u043b\u0435 \u0430\u0432\u0442\u043e \u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u0430 \u0441 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432. \u0416\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432\u044b\u0432\u043e\u0434, \u0447\u0442\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0444\u0438\u0440\u043c\u044b \u043d\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0434\u0430\u0442\u044c \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0442\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u0433\u043e \u0431\u0435\u0441\u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0441\u0438\u043b\u0443 \u0441\u0432\u043e\u0438\u0445 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0410 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0438\u0441\u0442\u0430\u043c \u0441\u0442\u043e\u0438\u0442 \u0430\u043a\u0446\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0430\u0432\u0442\u043e\u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u0430 \u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u00ab\u0436\u0435\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u0434\u0440\u0443\u0433\u0430\u00bb.\n@NeKaspersky", "creation_timestamp": "2022-03-29T17:19:58.000000Z"}, {"uuid": "5a29f796-9a41-474a-94ef-d0bef94e8394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/BeholderIsHereHub/148", "content": "\u041d\u0435 \u043c\u043e\u0433 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043e\u0439 \u044d\u0442\u0443 CVE-2022-27254(Mitre).\n\u042d\u0442\u0430 CVE \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) 2016-2020 \u0433\u043e\u0434\u043e\u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430. \u0421\u0443\u0442\u044c \u0432 \u0447\u0451\u043c: \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0431\u0435\u0441\u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0441\u0438\u0432\u0438\u043a\u0430\u0445 \u043f\u043e\u0441\u044b\u043b\u0430\u0435\u0442 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0440\u0430\u0434\u0438\u043e\u0447\u0430\u0441\u0442\u043e\u0442\u043d\u044b\u0439 \u0441\u0438\u0433\u043d\u0430\u043b \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0434\u0432\u0435\u0440\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 CVE-2019-20626.\n\n\u0418\u0437 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438(PoC):\n\u2316FCCID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0432\u043e\u0442 \u0438 \u0441\u0430\u043c PoC:       \n\u25b6\ufe0f \u0442\u044b\u043a(github)\n\nI couldn't ignore this CVE-2022-27254 (Mitre).\nThis CVE affects the 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R). The bottom line is this: the keyless access system on Civics sends the same radio frequency signal for each request to open the door, which allows for a repeat attack related to the CVE-2019-20626 problem .\nFrom the arsenal that was required for Proof of Concept(PoC):\n\u2316FCC ID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\nActually, here is the PoC itself:\n\u25b6\ufe0f click(github)\n\n#cve #poc #car #hackrf", "creation_timestamp": "2022-04-20T17:08:38.000000Z"}, {"uuid": "670ed8a8-735f-4aca-ae04-b3fd4f566d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/cibsecurity/39470", "content": "\u203c CVE-2022-27254 \u203c\n\nThe remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-24T01:29:10.000000Z"}, {"uuid": "99385ef0-6ed6-4b1f-bf17-d2cdd3d72b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/161", "content": "https://github.com/nonamecoder/CVE-2022-27254\n\n\u672c\u7530\u8fdc\u7a0b\u65e0\u94a5\u5319\u7cfb\u7edf\u6f0f\u6d1e\u7684PoC\u2026\u2026", "creation_timestamp": "2023-06-06T05:02:13.000000Z"}, {"uuid": "387cd5f0-4b14-44b1-9eff-0d65bd0840a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/5786", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Mar 1-31)\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\nCVE-2022-0847 - Dirty Pipe Vuln\nhttps://t.me/CyberSecurityTechnologies/5560\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\nhttps://t.me/CyberSecurityTechnologies/5692\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\nCVE-2022-22947 - Spring Cloud Gateway RCE\nhttps://t.me/CyberSecurityTechnologies/5554\nCVE-2022-22963 - Spring Core RCE\nhttps://t.me/CyberSecurityTechnologies/5711\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\nhttps://t.me/CyberSecurityTechnologies/5570\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2022-04-11T11:00:21.000000Z"}, {"uuid": "84c310b3-1850-43e8-b08f-5b6cc73d0f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/Fzzee/431", "content": "\u0641\u064a\u062f\u064a\u0648 \u062a\u0648\u0636\u064a\u062d \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0641\u064a \u0627\u0644\u0633\u064a\u0627\u0631\u0627\u062a \u0647\u0648\u0627\u0646\u062f\n\n\n \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0647\u0648\u0646\u062f\u0627 \u0641\u064a \u0646\u0638\u0627\u0645 \u0647\u0648\u0646\u062f\u0627 \u0639\u0646 \u0628\u0639\u062f \u0628\u062f\u0648\u0646 \u0645\u0641\u062a\u0627\u062d (CVE-2022-27254)\n\n\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062b\u0627\u0628\u062a\u0629 \u0644\u0641\u062a\u062d \u0623\u064a \u0648\u062c\u0645\u064a\u0639 \u0645\u0646\u0627\u0641\u0630 \u0634\u062d\u0646 \u0645\u0631\u0643\u0628\u0627\u062a Tesla \u0641\u064a \u0627\u0644\u0646\u0637\u0627\u0642!", "creation_timestamp": "2022-12-16T17:12:27.000000Z"}, {"uuid": "ed5fc7c9-e884-451a-a032-127d6af095f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-01T17:00:30.369967Z"}, {"uuid": "39186b39-0dbd-4015-9607-14aa08cdeb5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/71855", "content": "hacking: security in practice\nAlternative for flipper zero for Honda cve-2022-27254 hack?\n\nI'm trying to put out a content to make people aware of the cve-2022-27254 vulnerability, but I don't want to spend $400 on a HackerRf or $300 on a flipper zero (they're out of stock). Any alternatives for me to test this hack and make it work without having to spend an eye?\n\nsubmitted by /u/The_SuperTeacher \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:20.917215Z"}, {"uuid": "1b4583ec-6328-4cca-a39d-b677e2912b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/54031", "content": "Kali Linux Tutorials\nCVE-2022-27254 : PoC For Vulnerability In Honda\u2019s Remote Keyless System\n\nCVE-2022-27254 is a PoC for vulnerability in Honda\u2019s Remote Keyless System(CVE-2022-27254).\n\nSummary\n\nThis is a proof of concept for\u00a0CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack.\n\nVehicles Affected\n\n\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)\n\nImportant Notes\n\n\u2022Key fob FCC ID: KR5V2X\n\u2022Key fob frequency: 433.215MHz\n\u2022Key fob modulation: FSK\n\nTools used\n\n\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio\n\nPrevention\n\n* Manufacturers:\n* Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* Consumers:\n* Utilize a Faraday Pouch for the key fob.\n* Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof \n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:38.339411Z"}, {"uuid": "4fbf142a-e94b-4519-91e0-cef2ad5ccdf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48219", "content": "KitPloit - PenTest Tools!\nCVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCXFYec5Q2ebxFWm-Yo494Ag7n0XJZz-7pV-6hdgf5Lm8KWzhB1kWvT7sp9_fJyPgyaG-6B-JufZnkf3NThbM37mILf3YJB5nJCyPE3RD7tOf7OS-u7BRzhMrn2IaZVV_wSqjIz4INlgJ9w-kEIVBTFsq6sCMoWa0dxIaI0EiZ_hdZrHrDz4FlhFjw/w400-h320/CVE-2022-27254.png PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254) Disclaimer:For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth  and HackingIntoYourHeart.\n\nOthers mentioned in this repository are credited for the support that they have provided but have played no active role in any research conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval. Summary:This is a proof of concept for CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack. POC videosVehicles Affected:\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) Important Notes:\u2022Key fob FCC ID: KR5V2X\n\n\u2022Key fob frequency: 433.215MHz\n\n\u2022Key fob modulation: FSK Tools used:\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio Prevention:* \nManufacturers:\n\n1. Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* \nConsumers:\n\n1. Utilize a Faraday Pouch for the key fob.\n2. Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof\n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership. Credits:\u2022Ayyappan Rajesh(nonamecoder)\n\n\u2022HackingIntoYourHeart Special thanks to:\u2022 My professor :Prof. Hong Liu\n\n\u2022 My mentor:Sam Curry\n\n\u2022My professor :Prof. Ruolin Zhou References:\u2022https://www.youtube.com/watch?v=1RipwqJG50c\n\n\u2022https://attack.mitre.org/techniques/T1040/ Download CVE-2022-27254\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:49.382785Z"}, {"uuid": "044242aa-9493-414c-a9e4-3bd3243c1022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48211", "content": "CVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\nhttp://www.kitploit.com/2022/03/cve-2022-27254-poc-for-vulnerability-in.html\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:49.482230Z"}, {"uuid": "b053ae8f-d5b5-4477-b70a-da65d189731e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48213", "content": "PoC for vulnerability (https://www.kitploit.com/search/label/Vulnerability) in Honda's Remote Keyless System(CVE-2022-27254)  Disclaimer:  For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh (https://www.linkedin.com/in/ayyappan-rajesh/), a student at UMass Dartmouth  and HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/).  Others mentioned in this repository are credited for the support that they have provided but have played no active role in any   research (https://www.kitploit.com/search/label/Research) conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval.  Summary:  This is a proof of concept (https://www.kitploit.com/search/label/Proof%20Of%20Concept) for CVE-2022-27254 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27254), wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop (https://www.kitploit.com/search/label/Eavesdrop) on the request and conduct a replay attack.\nPOC videos (https://github.com/nonamecoder/CVE-2022-27254#poc-videos)  Vehicles Affected:  \u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)  Important Notes:   \u2022Key fob FCC ID: KR5V2X\n\n \u2022Key fob frequency: 433.215MHz\n\n \u2022Key fob modulation: FSK\n  Tools used:         \u2022FCCID.io\n       \u2022HackRF One\n       \u2022Gqrx\n       \u2022GNURadio\n  Prevention:      Manufacturers:    Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication (https://www.kitploit.com/search/label/Authentication) of a remote keyless entry (RKE) or passive keyless entry (PKE) system.        Consumers:    Utilize a Faraday Pouch for the key fob.  Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.        The precautions mentioned above ARE NOT foolproofIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.  Credits:  \u2022Ayyappan Rajesh(nonamecoder) (https://www.linkedin.com/in/ayyappan-rajesh/)  \u2022HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/)  Special thanks to:  \u2022 My professor :Prof. Hong Liu (https://www.umassd.edu/directory/hliu/)  \u2022 My mentor:Sam Curry (https://www.linkedin.com/in/currysam)  \u2022My professor :Prof. Ruolin Zhou (https://www.umassd.edu/directory/rzhou1/)  References:  \u2022https://www.youtube.com/watch?v=1RipwqJG50c  \u2022https://attack.mitre.org/techniques/T1040/  \n\nDownload CVE-2022-27254 (https://github.com/nonamecoder/CVE-2022-27254)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:49.525250Z"}, {"uuid": "caaf04b6-9626-4a3d-8fd6-ec568b8b1047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/71855", "content": "hacking: security in practice\nAlternative for flipper zero for Honda cve-2022-27254 hack?\n\nI'm trying to put out a content to make people aware of the cve-2022-27254 vulnerability, but I don't want to spend $400 on a HackerRf or $300 on a flipper zero (they're out of stock). Any alternatives for me to test this hack and make it work without having to spend an eye?\n\nsubmitted by /u/The_SuperTeacher \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:36.437814Z"}, {"uuid": "71e5d20f-aa5d-434e-aa0b-f0cf52c2865b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/54031", "content": "Kali Linux Tutorials\nCVE-2022-27254 : PoC For Vulnerability In Honda\u2019s Remote Keyless System\n\nCVE-2022-27254 is a PoC for vulnerability in Honda\u2019s Remote Keyless System(CVE-2022-27254).\n\nSummary\n\nThis is a proof of concept for\u00a0CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack.\n\nVehicles Affected\n\n\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)\n\nImportant Notes\n\n\u2022Key fob FCC ID: KR5V2X\n\u2022Key fob frequency: 433.215MHz\n\u2022Key fob modulation: FSK\n\nTools used\n\n\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio\n\nPrevention\n\n* Manufacturers:\n* Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* Consumers:\n* Utilize a Faraday Pouch for the key fob.\n* Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof \n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:48.813730Z"}, {"uuid": "12784ec7-ae8b-4c4a-9f82-29e3d087ed93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48219", "content": "KitPloit - PenTest Tools!\nCVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCXFYec5Q2ebxFWm-Yo494Ag7n0XJZz-7pV-6hdgf5Lm8KWzhB1kWvT7sp9_fJyPgyaG-6B-JufZnkf3NThbM37mILf3YJB5nJCyPE3RD7tOf7OS-u7BRzhMrn2IaZVV_wSqjIz4INlgJ9w-kEIVBTFsq6sCMoWa0dxIaI0EiZ_hdZrHrDz4FlhFjw/w400-h320/CVE-2022-27254.png PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254) Disclaimer:For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth  and HackingIntoYourHeart.\n\nOthers mentioned in this repository are credited for the support that they have provided but have played no active role in any research conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval. Summary:This is a proof of concept for CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack. POC videosVehicles Affected:\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) Important Notes:\u2022Key fob FCC ID: KR5V2X\n\n\u2022Key fob frequency: 433.215MHz\n\n\u2022Key fob modulation: FSK Tools used:\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio Prevention:* \nManufacturers:\n\n1. Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* \nConsumers:\n\n1. Utilize a Faraday Pouch for the key fob.\n2. Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof\n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership. Credits:\u2022Ayyappan Rajesh(nonamecoder)\n\n\u2022HackingIntoYourHeart Special thanks to:\u2022 My professor :Prof. Hong Liu\n\n\u2022 My mentor:Sam Curry\n\n\u2022My professor :Prof. Ruolin Zhou References:\u2022https://www.youtube.com/watch?v=1RipwqJG50c\n\n\u2022https://attack.mitre.org/techniques/T1040/ Download CVE-2022-27254\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:02.760387Z"}, {"uuid": "76c9a4ab-1b64-475a-90b0-8217cda3bd69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48211", "content": "CVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\nhttp://www.kitploit.com/2022/03/cve-2022-27254-poc-for-vulnerability-in.html\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:02.853818Z"}, {"uuid": "cc6bf18e-a3af-4db9-bf61-2cf15aafa3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48213", "content": "PoC for vulnerability (https://www.kitploit.com/search/label/Vulnerability) in Honda's Remote Keyless System(CVE-2022-27254)  Disclaimer:  For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh (https://www.linkedin.com/in/ayyappan-rajesh/), a student at UMass Dartmouth  and HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/).  Others mentioned in this repository are credited for the support that they have provided but have played no active role in any   research (https://www.kitploit.com/search/label/Research) conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval.  Summary:  This is a proof of concept (https://www.kitploit.com/search/label/Proof%20Of%20Concept) for CVE-2022-27254 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27254), wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop (https://www.kitploit.com/search/label/Eavesdrop) on the request and conduct a replay attack.\nPOC videos (https://github.com/nonamecoder/CVE-2022-27254#poc-videos)  Vehicles Affected:  \u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)  Important Notes:   \u2022Key fob FCC ID: KR5V2X\n\n \u2022Key fob frequency: 433.215MHz\n\n \u2022Key fob modulation: FSK\n  Tools used:         \u2022FCCID.io\n       \u2022HackRF One\n       \u2022Gqrx\n       \u2022GNURadio\n  Prevention:      Manufacturers:    Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication (https://www.kitploit.com/search/label/Authentication) of a remote keyless entry (RKE) or passive keyless entry (PKE) system.        Consumers:    Utilize a Faraday Pouch for the key fob.  Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.        The precautions mentioned above ARE NOT foolproofIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.  Credits:  \u2022Ayyappan Rajesh(nonamecoder) (https://www.linkedin.com/in/ayyappan-rajesh/)  \u2022HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/)  Special thanks to:  \u2022 My professor :Prof. Hong Liu (https://www.umassd.edu/directory/hliu/)  \u2022 My mentor:Sam Curry (https://www.linkedin.com/in/currysam)  \u2022My professor :Prof. Ruolin Zhou (https://www.umassd.edu/directory/rzhou1/)  References:  \u2022https://www.youtube.com/watch?v=1RipwqJG50c  \u2022https://attack.mitre.org/techniques/T1040/  \n\nDownload CVE-2022-27254 (https://github.com/nonamecoder/CVE-2022-27254)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:02.900572Z"}, {"uuid": "9dc1af1f-35c2-4051-bf49-fab136368fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-02T01:04:13.421500Z"}]}