Security Resilience

CVE-2023-39075

Renault Zoe Ev 2021 Firmware 11.10.2021 – 16.01.2023

Public PoC
Published
03 August 2023
Modified
21 November 2024
CVSS Score v3.1 4.6
Click a component to see what it means
Raw vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0051 42th percentile
Risk Priority 37 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-39075 is a medium-severity an unspecified weakness vulnerability in Renault Zoe Ev 2021 Firmware. Its CVSS base score is 4.6 (Medium).

Operationally, ranked at the 42th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R (builds 11.10.2021 to 16.01.2023) allows attackers to crash the infotainment system by sending arbitrary USB data via a USB device.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-39801Same product: Renault Zoe Ev 2021

Affected Assets

renault
zoe ev 2021 firmware
11.10.2021 — 16.01.2023

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References