Vulnerabilities > Skoda Auto > Superb 3 Firmware > 2022
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-12 | CVE-2023-28897 | Use of Hard-coded Credentials vulnerability in Skoda-Auto Superb 3 Firmware 2022 The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022. | 9.8 |
| 2024-01-12 | CVE-2023-28898 | Unspecified vulnerability in Skoda-Auto Superb 3 Firmware 2022 The Real-Time Streaming Protocol implementation in the MIB3 infotainment incorrectly handles requests to /logs URI, when the id parameter equals to zero. high complexity skoda-auto | 5.3 |