{"uuid": "4fbf142a-e94b-4519-91e0-cef2ad5ccdf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48219", "content": "KitPloit - PenTest Tools!\nCVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCXFYec5Q2ebxFWm-Yo494Ag7n0XJZz-7pV-6hdgf5Lm8KWzhB1kWvT7sp9_fJyPgyaG-6B-JufZnkf3NThbM37mILf3YJB5nJCyPE3RD7tOf7OS-u7BRzhMrn2IaZVV_wSqjIz4INlgJ9w-kEIVBTFsq6sCMoWa0dxIaI0EiZ_hdZrHrDz4FlhFjw/w400-h320/CVE-2022-27254.png PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254) Disclaimer:For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth  and HackingIntoYourHeart.\n\nOthers mentioned in this repository are credited for the support that they have provided but have played no active role in any research conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval. Summary:This is a proof of concept for CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack. POC videosVehicles Affected:\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) Important Notes:\u2022Key fob FCC ID: KR5V2X\n\n\u2022Key fob frequency: 433.215MHz\n\n\u2022Key fob modulation: FSK Tools used:\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio Prevention:* \nManufacturers:\n\n1. Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* \nConsumers:\n\n1. Utilize a Faraday Pouch for the key fob.\n2. Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof\n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership. Credits:\u2022Ayyappan Rajesh(nonamecoder)\n\n\u2022HackingIntoYourHeart Special thanks to:\u2022 My professor :Prof. Hong Liu\n\n\u2022 My mentor:Sam Curry\n\n\u2022My professor :Prof. Ruolin Zhou References:\u2022https://www.youtube.com/watch?v=1RipwqJG50c\n\n\u2022https://attack.mitre.org/techniques/T1040/ Download CVE-2022-27254\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:49.382785Z"}