NVD

Id
26725  
Name
CVE-2015-5611  
Description
Unspecified vulnerability in Uconnect before 15.26.1, as used in certain Fiat Chrysler Automobiles (FCA) from 2013 to 2015 models, allows remote attackers in the same cellular network to control vehicle movement, cause human harm or physical damage, or modify dashboard settings via vectors related to modification of entertainment-system firmware and access of the CAN bus due to insufficient "Radio security protection," as demonstrated on a 2014 Jeep Cherokee Limited FWD.  
Reject
 
CVSS Version
2  
CVSS Score
8.3  
Severity
High  
CVSS Base Score
8.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-21  
Modified Date
2016-12-23  
Seq
2015-5611  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
141479 26725 CVE-2015-5611 http://blog.fcanorthamerica.com/2015/07/22/unhacking-the-hacked-jeep/  View
141480 26725 CVE-2015-5611 http://media.fcanorthamerica.com/newsrelease.do?id=16827&mid=1  View
141481 26725 CVE-2015-5611 http://www-odi.nhtsa.dot.gov/acms/cs/jaxrs/download/doc/UCM483033/RCAK-15V461-4967.pdf  View
141482 26725 CVE-2015-5611 http://www-odi.nhtsa.dot.gov/acms/cs/jaxrs/download/doc/UCM483036/RCLRPT-15V461-9407.pdf  View
141483 26725 CVE-2015-5611 75993  View
141484 26725 CVE-2015-5611 http://www.wired.com/2015/07/hackers-remotely-kill-jeep-highway/  View
141485 26725 CVE-2015-5611 https://ics-cert.us-cert.gov/advisories/ICSA-15-260-01  View
141486 26725 CVE-2015-5611 https://twitter.com/0xcharlie/status/623171594349842433  View
141487 26725 CVE-2015-5611 https://twitter.com/0xcharlie/status/623195051296993280  View
141488 26725 CVE-2015-5611 https://twitter.com/0xcharlie/status/623258479730552832  View
141489 26725 CVE-2015-5611 https://www.youtube.com/watch?v=MK0SrxBC1xs&feature=youtu.be  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8579 JVNDB-2015-003899 Fiat Chrysler Automobiles で使用される Uconnect における車両の動作を制御される脆弱性 Fiat Chrysler Automobiles (FCA) で使用される Uconnect には、車両の動作を制御される、人間への危害または物理的な損傷を引き起こされる、またはダッシュボードの設定を変更される脆弱性が存在します。 CVE-2015-5611 82836 CVE-2015-5611 26725 8.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003899.html 2015-07-21 2015-09-18 View