CVE-2022-36945

The Remote Keyless Entry (RKE) receiving unit on certain Mazda vehicles through 2020 allows remote attackers to perform unlock operations and force a resynchronization after capturing three consecutive valid key-fob signals over the radio, aka a RollBack attack. The attacker retains the ability to unlock indefinitely.

The Remote Keyless Entry (RKE) receiving unit on certain Mazda vehicles through 2020 allows remote attackers to perform unlock operations and force a resynchronization after capturing three consecutive valid key-fob signals over the radio, aka a RollBack attack. The attacker retains the ability to unlock indefinitely.

La unidad receptora de Entrada Remota sin Llave (RKE) de determinados vehículos Mazda versiones hasta 2020, permite a atacantes remotos llevar a cabo operaciones de desbloqueo y forzar una resincronización después de capturar tres señales válidas consecutivas del llavero a través de la radio, también se conoce como un ataque RollBack. El atacante conserva la capacidad de desbloquear indefinidamente.