cnvd-2017-18627
Vulnerability from cnvd
Title
Continental TCU远程代码执行漏洞
Description
TCU 是Continental AG（大陆集团）生产的现代汽车常用的，用于传输数据的2G调制解调器，可以实现汽车与远程管理工具（如 Web 面板和移动应用程序）之间的通信。 Continental TCU存在远程代码执行漏洞，允许攻击者利用临时移动用户识别码（TMSI）远程访问与控制存储器，并在 TCU 基带无线电处理器上远程执行任意代码。
Severity
高
Formal description

厂商尚未提供漏洞修补方案，请关注厂商主页及时更新： https://www.continental-corporation.com/zh-cn

Reference
http://securityaffairs.co/wordpress/61587/hacking/tcus-car-hacking.html https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Jesse-Michael-and-Mickey-Shkatov-Driving-Down-the-Rabbit-Hole.pdf https://nvd.nist.gov/vuln/detail/CVE-2017-9633 https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01
Impacted products
Name
['Nissan Nissan 2011-2015 Leaf', 'Infiniti Infiniti 2013 JX3', 'Infiniti Infiniti 2014-2016 QX60', 'Infiniti Infiniti 2014-2016 QX60 Hybrid', 'Infiniti Infiniti 2014-2015 QX50', 'Infiniti Infiniti 2014-2015 QX50 Hybrid', 'Infiniti Infiniti 2013 M37/M56', 'Infiniti Infiniti 2014-2016 Q70', 'Infiniti Infiniti 2014-2016 Q70L', 'Infiniti Infiniti 2015-2016 Q70 Hybrid', 'Infiniti Infiniti 2013 QX56', 'Infiniti Infiniti 2014-2016 QX 80', 'BMW BMW produced between 2009-2010', 'Ford P-HEV']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-9633"
    }
  },
  "description": "TCU \u662fContinental AG\uff08\u5927\u9646\u96c6\u56e2\uff09\u751f\u4ea7\u7684\u73b0\u4ee3\u6c7d\u8f66\u5e38\u7528\u7684\uff0c\u7528\u4e8e\u4f20\u8f93\u6570\u636e\u76842G\u8c03\u5236\u89e3\u8c03\u5668\uff0c\u53ef\u4ee5\u5b9e\u73b0\u6c7d\u8f66\u4e0e\u8fdc\u7a0b\u7ba1\u7406\u5de5\u5177\uff08\u5982 Web \u9762\u677f\u548c\u79fb\u52a8\u5e94\u7528\u7a0b\u5e8f\uff09\u4e4b\u95f4\u7684\u901a\u4fe1\u3002\r\n\r\nContinental TCU\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5229\u7528\u4e34\u65f6\u79fb\u52a8\u7528\u6237\u8bc6\u522b\u7801\uff08TMSI\uff09\u8fdc\u7a0b\u8bbf\u95ee\u4e0e\u63a7\u5236\u5b58\u50a8\u5668\uff0c\u5e76\u5728 TCU \u57fa\u5e26\u65e0\u7ebf\u7535\u5904\u7406\u5668\u4e0a\u8fdc\u7a0b\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "discovererName": "Mickey Shkatov, Jesse Michael, and Oleksandr Bazhaniuk (@jessemichael, @HackingThings, @ABazhaniuk) from the Advanced Threat Research Team at McAfee",
  "formalWay": "\u5382\u5546\u5c1a\u672a\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u8865\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u53ca\u65f6\u66f4\u65b0\uff1a \r\nhttps://www.continental-corporation.com/zh-cn",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-18627",
  "openTime": "2017-08-03",
  "products": {
    "product": [
      "Nissan Nissan 2011-2015 Leaf",
      "Infiniti Infiniti 2013 JX3",
      "Infiniti Infiniti 2014-2016 QX60",
      "Infiniti Infiniti 2014-2016 QX60 Hybrid",
      "Infiniti Infiniti 2014-2015 QX50",
      "Infiniti Infiniti 2014-2015 QX50 Hybrid",
      "Infiniti Infiniti 2013 M37/M56",
      "Infiniti Infiniti 2014-2016 Q70",
      "Infiniti Infiniti 2014-2016 Q70L",
      "Infiniti Infiniti 2015-2016 Q70 Hybrid",
      "Infiniti Infiniti 2013 QX56",
      "Infiniti Infiniti 2014-2016 QX 80",
      "BMW BMW produced between 2009-2010",
      "Ford P-HEV"
    ]
  },
  "referenceLink": "http://securityaffairs.co/wordpress/61587/hacking/tcus-car-hacking.html \r\nhttps://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Jesse-Michael-and-Mickey-Shkatov-Driving-Down-the-Rabbit-Hole.pdf \r\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-9633\r\nhttps://ics-cert.us-cert.gov/advisories/ICSA-17-208-01",
  "serverity": "\u9ad8",
  "submitTime": "2017-08-03",
  "title": "Continental TCU\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.