Is CVE-2025-32058 actively exploited?

No active exploitation of CVE-2025-32058 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-32058 be exploited remotely?

No. CVE-2025-32058 requires local access to exploit.

What is the CVSS score of CVE-2025-32058?

CVE-2025-32058 has a CVSS score of 9.3 (CRITICAL) and an EPSS exploitation probability of 0.01%.

HOME VULNERABILITIESCVE-2025-32058

CRITICAL

CVE-2025-32058

CWE-121Published: February 15, 2026· Updated: Feb 18, 2026

9.3

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:0.6th

Official Description

The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interface through a custom protocol. There is a vulnerability during processing requests of this protocol on the V850 side which allows an attacker with code execution on the infotainment main SoC to perform code execution on the RH850 module and subsequently send arbitrary CAN messages over the connected CAN bus.

First identified on Nissan Leaf ZE1 manufactured in 2020.

NVD Source

Risk Analysis

This critical vulnerability in the Bosch Infotainment ECU's RH850 module allows an attacker with code execution on the infotainment main SoC to achieve code execution on the RH850 module. With a CVSS score of 9.3, this flaw enables sending arbitrary CAN messages, posing a significant risk to the integrity and availability of vehicle systems, despite a very low EPSS score.

No public exploit is currently known for this vulnerability. The attack vector is local, meaning an attacker needs prior code execution on the infotainment main SoC to exploit it.

Recommended Action

Apply security updates provided by Bosch or vehicle manufacturers to address this vulnerability in the Infotainment ECU. Implement strong security measures to prevent code execution on the infotainment main SoC.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2025-32058 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.3.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.