Lennert Wouters

The issue allows an attacker to unlock arbitrary doors at a property via forged keycards, if the attacker has obtained one active or expired keycard for the specific property. This occurs because the key derivation function relies only on a `UID`.

The issue is related to a U-Boot shell vulnerability that results in privilege escalation in a production device.

The issue is related to a bug in u-boot that allows for access to the u-boot shell and interrupt over UART. This is caused by a buffer overflow in memory. An attacker could exploit this to bypass secure boot mechanisms.

Name of the Vulnerable Software and Affected Versions: Motorola-branded Binatone Hubble Cameras (affected versions not specified) Description: An information disclosure issue was reported that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update packages. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Motorola-branded Binatone Hubble Cameras (affected versions not specified) Description: An issue was found in Motorola-branded Binatone Hubble Cameras where an exposed debug interface could allow an attacker with physical access to gain unauthorized access to the device. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Motorola-branded Binatone Hubble Cameras (affected versions not specified) Description: A buffer overflow was reported in the local web server of the cameras, which could allow an unauthenticated attacker on the same network to perform a denial-of-service attack against the device. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Motorola-branded Binatone Hubble Cameras (affected versions not specified) Description: An information disclosure issue was reported that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue concerns key fobs in Tesla Model X vehicles that accept firmware updates without signature verification, allowing attackers to construct firmware that retrieves an unlock code from a secure enclave chip.

The issue allows an attacker, who is inside a vehicle or able to send data over the CAN bus, to start and drive the vehicle with a spoofed key fob. This is possible because the vehicles do not perform certificate validation during an attempt to pair a new key fob with the body control module (BCM).

The key fobs of the affected vehicles rely on five VIN digits for authentication to initiate a Bluetooth wake-up action through the body control module (BCM). The full VIN is visible from outside the vehicle.

The issue concerns the Pektron Passive Keyless Entry and Start (PKES) system, which is used in vehicles such as the Tesla Model S. The system relies on the DST40 cipher, making it easier for attackers to gain access. The attack involves a precomputation of 5.4 TB, followed by wake-frame reception and two challenge/response operations, allowing attackers to clone a key fob within a few seconds.