CVE-2025-32056 - CVE House
Back to Database
Status published Medium CVE-2025-32056

Anti-Theft Bypass for Infotainment ECU

Vulnerability Description

The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection. First identified on Nissan Leaf ZE1 manufactured in 2020.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-32056

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Polina Smirnova (PCA Cyber Security Assessment Team)

References

More from Bosch

View All →
CVE-2025-32063
Enabling SSH server on Infotainment ECU
Medium 6.8
CVE-2025-32062
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
High 8.8
CVE-2025-32061
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
High 8.8
CVE-2025-32060
Absence of Kernel Module Signature Verification on Linux System of Infotainment ECU
Medium 6.7
CVE-2025-32059
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
High 8.8

Affected Vendor

Affected Software

Infotainment system ECU
Vulnerable Versions:
283C30861E

Timeline

Official Publish: January 22nd, 2026
Last Modified: January 22nd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Weaknesses (CWE)

CWE-1241

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.