{"id":"CVE-2023-33281","aliases":["EUVD-2023-37446","GHSA-mf42-cj9f-vmhp"],"status":"disputed","title":"The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door...","description":"The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in the exploit demonstration does not match any technology that Nissan provides to customers.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00566,"percentile":0.4727,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-294"],"published":"2023-05-22T00:00:00Z","modified":"2026-06-17T06:01:28Z","products":[{"vendor":"nissan","product":"sylphy_classic_2021_firmware"}],"references":[{"url":"https://www.youtube.com/watch?v=GG1utSdYG1k","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://twitter.com/Kevin2600/status/1658059570806415365","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-33281"},{"url":"https://github.com/advisories/GHSA-mf42-cj9f-vmhp"}],"sources":{"cve":[{"id":"CVE-2023-33281","description":"The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in the exploit demonstration does not match any technology that Nissan provides to customers.","status":"disputed","published":"2023-05-22T00:00:00Z","modified":"2024-08-02T15:39:36.138Z","updated_at":"2026-11-02T14:35:34.170609Z"}],"euvd":[{"id":"EUVD-2023-37446","description":"The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in the exploit demonstration does not match any technology that Nissan provides to customers.","status":"published","published":"2023-05-22T00:00:00Z","modified":"2024-08-02T15:39:36Z","updated_at":"2026-11-03T03:50:04.380287Z"}],"ghsa":[{"id":"GHSA-mf42-cj9f-vmhp","title":"The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door...","description":"The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack.","status":"published","published":"2023-05-22T03:30:16Z","modified":"2024-03-30T05:01:48Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T14:55:45.190481Z"}],"nvd":[{"id":"CVE-2023-33281","description":"The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in the exploit demonstration does not match any technology that Nissan provides to customers.","status":"disputed","published":"2023-05-22T02:15:11.837Z","modified":"2026-06-17T06:01:28.417Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T14:08:03.200773Z"}]}}