Vulnerability · Published Jan 22, 2026 · Assigned by ASRG
CVE-2025-32056Anti-Theft Bypass for Infotainment ECU
Medium 4.0
In plain English
A medium-severity security flaw in Infotainment system ECU from Bosch. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)4.0Medium
Exploit odds (30 days)0.3%top 80.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection. First identified on Nissan Leaf ZE1 manufactured in 2020.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bosch | Infotainment system ECU | 283C30861E |
Weakness: CWE-1241 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N