Read the docs

Skoda Auto

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Skoda Auto records in CISA KEV

No Skoda Auto vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Superb 3 Firmware 3 records MEDIUM Skoda Connect 2 records LOW

Records

2 records in Skoda Connect · all components

TI-2023-13393 CVE-2023-28900 · GHSA-rw5p-hq5q-gf73

Nickname Disclosure on the Backend Automotive Server

Priority LOW 30

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00377 Published 2024-01-18 No fix listed CWE-200
TI-2023-13394 CVE-2023-28901 · GHSA-52jh-x29h-9vr8

Trip Data Disclosure from Backend

Priority LOW 25

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other information of Skod…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00507 Published 2024-01-18 No fix listed CWE-200
Open these records in search →