What is the CVSS score of CVE-2024-6245?

CVE-2024-6245 has a CVSS 3.1 base score of 7.4 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Maruti Suzuki SmartPlay CVE-2024-6245

HIGH

Use of Default Credentials (CWE-1392)

2024-10-28 cve@asrg.io

Information Disclosure

7.4

CVSS 3.1 · Vendor: asrg

Severity by source

Vendor (asrg) PRIMARY

7.4 HIGH

AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (asrg) · only source for this CVE.

CVSS VectorVendor: asrg

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Oct 28, 2024 - 17:15 cve.org

HIGH 7.4

DescriptionCVE.org

Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market.

This issue affects SmartPlay: 66T0.05.50.

AnalysisAI

Technical ContextAI

This vulnerability is classified as Use of Default Credentials (CWE-1392), which allows attackers to gain access using factory-default usernames and passwords. Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market.05.50.

Affected ProductsAI

See vendor advisory for affected versions.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Force credential change on first use, remove default accounts, document required credential changes.