Get real-time updates on Telegram
CVE-2026-82357: C-Open 0 to before 1.1.1
CVE-2026-82357. CVSS 3.1 base score 6.5 (MEDIUM, Source advisory). EPSS 0.00287 (percentile 0.19356), scored 2026-10-06.
Affected technology
C-Open · 0 to before 1.1.1
RT-Labs AB
Component: Not specified by the source
Attack conditions (Source advisory, CVSS 4.0): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Remote attacker with access to the CAN bus, through a compromised node for instance, can initiate the LSS protocol on a device with a misconfigured identity object and potentially crash the device. Source advisory’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality and integrity impact as none; availability impact as high.
- CWE
- CWE-476
- CCR priority
- 26.1 /100 (P4)
- CVSS 3.1
- 6.5 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
- EPSS
- 0.00287 · percentile 0.19356 · 2026-10-06
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-07 18:01:36.740415+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-82357.html