ByteOS Network

NVD Vulnerability Details :

CVE-2025-32063

Received

Source-cve@asrg.io

Published At-15 Feb, 2026 | 11:15

Updated At-15 Feb, 2026 | 11:15

There is a misconfiguration vulnerability inside the Infotainment ECU manufactured by BOSCH. The vulnerability happens during the startup phase of a specific systemd service, and as a result, the following developer features will be activated: the disabled firewall and the launched SSH server. First identified on Nissan Leaf ZE1 manufactured in 2020.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.8	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 6.8

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE ID	Type	Source
CWE-306	Secondary	cve@asrg.io

CWE ID: CWE-306

Type: Secondary

Source: cve@asrg.io

References

Hyperlink	Source	Resource
http://i.blackhat.com/Asia-25/Asia-25-Evdokimov-Remote-Exploitation-of-Nissan-Leaf.pdf	cve@asrg.io	N/A
https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-nissan-infotainment-manufactured-by-bosch	cve@asrg.io	N/A
https://www.nissan.co.uk/vehicles/new-vehicles/leaf.html	cve@asrg.io	N/A

Hyperlink: http://i.blackhat.com/Asia-25/Asia-25-Evdokimov-Remote-Exploitation-of-Nissan-Leaf.pdf

Source: cve@asrg.io

Resource: N/A

Hyperlink: https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-nissan-infotainment-manufactured-by-bosch

Source: cve@asrg.io

Resource: N/A

Hyperlink: https://www.nissan.co.uk/vehicles/new-vehicles/leaf.html

Source: cve@asrg.io

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History