Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Toyota Clear all filters
TI-2023-13779 CVE-2023-29389 · GHSA-3gqh-xgpm-cfvx

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus…

Priority LOW 33

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reach…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0066 Published 2023-04-05 No fix listed CWE-74
TI-2020-04521 CVE-2020-5551 · GHSA-5c48-qxrh-hrpg

Incorrect default permissions in TOYOTA MOTOR CORPORATION DCU

Priority MEDIUM 41

Toyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01397 Published 2020-03-30 No fix listed CWE-276