CVE-2025-32056
BaseFortify
Publication date: 2026-01-22
Last updated on: 2026-01-26
Assigner: Automotive Security Research Group (ASRG)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nissan | leaf | 2020 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1241 | The device uses an algorithm that is predictable and generates a pseudo-random number. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the anti-theft protection mechanism in certain vehicles, specifically the Nissan Leaf ZE1 from 2020. Attackers can bypass this protection because the system uses weak response generation algorithms for the head unit. By sniffing CAN traffic or pre-calculating response values, an attacker can reveal all 32 corresponding responses needed to bypass the anti-theft system.
How can this vulnerability impact me? :
This vulnerability can allow attackers to bypass the vehicle's anti-theft protection, potentially enabling unauthorized access or control over the vehicle. This could lead to theft or misuse of the vehicle.