The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626.
A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).
| Link | Tags |
|---|---|
| https://github.com/HackingIntoYourHeart/Unoriginal-Rice-Patty | third party advisory exploit |
| https://drive.google.com/file/d/1MtmWfBs1r6Y3JN1HpbNsZqO1GcsdgPdc/view?usp=sharing | third party advisory exploit |
| https://github.com/nonamecoder/CVE-2022-27254 | third party advisory exploit |
| https://news.ycombinator.com/item?id=30804702 | issue tracking exploit third party advisory |
| https://www.bleepingcomputer.com/news/security/honda-bug-lets-a-hacker-unlock-and-start-your-car-via-replay-attack/ | third party advisory exploit |
| https://www.theregister.com/2022/03/25/honda_civic_hack/ | third party advisory exploit |