Executive Summary

This vulnerability exists in the Infotainment ECU manufactured by Bosch, which uses a RH850 module for CAN communication. The RH850 module is connected to the infotainment system via the INC interface using a custom protocol. During the processing of requests on this protocol on the V850 side, an attacker who already has code execution on the infotainment main SoC can exploit this vulnerability to gain code execution on the RH850 module.

Once the attacker has control over the RH850 module, they can send arbitrary CAN messages over the connected CAN bus, potentially manipulating vehicle systems.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have severe impacts because it allows an attacker with initial access to the infotainment system to escalate their control to the RH850 module responsible for CAN communication.

• The attacker can execute arbitrary code on the RH850 module.
• They can send arbitrary CAN messages, potentially controlling or disrupting vehicle functions connected to the CAN bus.
• This could lead to safety risks, unauthorized control of vehicle systems, or denial of service.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

I don't know

Useful 0 Not Useful 0

Mitigation Strategies

I don't know

Useful 0 Not Useful 0