{"uuid": "2237eed4-875f-47ff-aa4c-765876ba6d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/48213", "content": "PoC for vulnerability (https://www.kitploit.com/search/label/Vulnerability) in Honda's Remote Keyless System(CVE-2022-27254)  Disclaimer:  For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh (https://www.linkedin.com/in/ayyappan-rajesh/), a student at UMass Dartmouth  and HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/).  Others mentioned in this repository are credited for the support that they have provided but have played no active role in any   research (https://www.kitploit.com/search/label/Research) conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval.  Summary:  This is a proof of concept (https://www.kitploit.com/search/label/Proof%20Of%20Concept) for CVE-2022-27254 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27254), wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop (https://www.kitploit.com/search/label/Eavesdrop) on the request and conduct a replay attack.\nPOC videos (https://github.com/nonamecoder/CVE-2022-27254#poc-videos)  Vehicles Affected:  \u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)  Important Notes:   \u2022Key fob FCC ID: KR5V2X\n\n \u2022Key fob frequency: 433.215MHz\n\n \u2022Key fob modulation: FSK\n  Tools used:         \u2022FCCID.io\n       \u2022HackRF One\n       \u2022Gqrx\n       \u2022GNURadio\n  Prevention:      Manufacturers:    Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication (https://www.kitploit.com/search/label/Authentication) of a remote keyless entry (RKE) or passive keyless entry (PKE) system.        Consumers:    Utilize a Faraday Pouch for the key fob.  Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.        The precautions mentioned above ARE NOT foolproofIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.  Credits:  \u2022Ayyappan Rajesh(nonamecoder) (https://www.linkedin.com/in/ayyappan-rajesh/)  \u2022HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/)  Special thanks to:  \u2022 My professor :Prof. Hong Liu (https://www.umassd.edu/directory/hliu/)  \u2022 My mentor:Sam Curry (https://www.linkedin.com/in/currysam)  \u2022My professor :Prof. Ruolin Zhou (https://www.umassd.edu/directory/rzhou1/)  References:  \u2022https://www.youtube.com/watch?v=1RipwqJG50c  \u2022https://attack.mitre.org/techniques/T1040/  \n\nDownload CVE-2022-27254 (https://github.com/nonamecoder/CVE-2022-27254)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:35.526508Z"}