CVE-2023-39801
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service (DoS) via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature.
Risk Assessment
A DoS attack can disrupt the multimedia system's operation in the vehicle, affecting user comfort and safety.
Recommendation
It is recommended to update the software to the latest version that includes fixes for exception handling and to test the system for vulnerabilities to DoS attacks.
Original NVD description (English source)
A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service (DoS) via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature.