CVE-2023-6073

Publication date

2023-11-10 07:32:16

Family

ASRG

State

PUBLISHED

Description

Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of the VW Group with the same hardware) and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls.