Medium severity · published Jan 22, 2026
CVE-2025-32056
Anti-Theft Bypass for Infotainment ECU
4.0
CVSS
0.3%
EPSS
No
On KEV
Description
The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection.
First identified on Nissan Leaf ZE1 manufactured in 2020.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Infotainment system ECU · Bosch
283C30861E · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-32056
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-32056
i.blackhat.com
http://i.blackhat.com/Asia-25/Asia-25-Evdokimov-Remote-Exploitation-of-Nissan-Leaf.pdf
pcacybersecurity.com
https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-nissan-infotainment-manufactured-by-bosch
www.nissan.co.uk
https://www.nissan.co.uk/vehicles/new-vehicles/leaf.html
More from Infotainment system ECU
9.3
CVE-2025-32058
Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU
8.8
CVE-2025-32062
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
8.8
CVE-2025-32061
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
8.8
CVE-2025-32059
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
6.8
CVE-2025-32063
Enabling SSH server on Infotainment ECU