ZDI-CAN-27757 LOW 2.4 Overdue Jul 29, 2025

Toyota

Toyota, the major automotive manufacturer, has a low-severity vulnerability (CVSS 2.4) that requires physical access to exploit and causes only minor availability impact with no authentication needed. The vulnerability poses minimal risk as it cannot be exploited remotely and has no confidentiality or integrity consequences. Security teams should monitor for patches when Toyota releases an update by the November 26, 2025 deadline, though this issue does not warrant urgent remediation efforts.

Advisory Details
Researcher Discovered by: Jay Turla of VicOne
Reported July 29, 2025
Deadline November 26, 2025 141d overdue
CVSS Vector AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Tags

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy