ZDI-CAN-27757
LOW 2.4
Overdue
Jul 29, 2025
Toyota
Toyota, the major automotive manufacturer, has a low-severity vulnerability (CVSS 2.4) that requires physical access to exploit and causes only minor availability impact with no authentication needed. The vulnerability poses minimal risk as it cannot be exploited remotely and has no confidentiality or integrity consequences. Security teams should monitor for patches when Toyota releases an update by the November 26, 2025 deadline, though this issue does not warrant urgent remediation efforts.
Advisory Details
Researcher
Discovered by:
Jay Turla of VicOne
Reported
July 29, 2025
Deadline
November 26, 2025
141d overdue
CVSS Vector
AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L