title: Denial of Service via ECU reset service
description: By sending a specific reset UDS request via OBDII port of Skoda vehicles, it is possible to cause vehicle engine shutdown and denial of service of other vehicle components even when the vehicle is moving at a high speed. No safety critical functions affected.
affected:
{
defaultStatus: unaffected
product: Superb III
vendor: Škoda
versions:
lessThanOrEqual: 2022, status: affected, version: 0, versionType: 2.0 TDI
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL