What is CVE-2023-28910?

CVE-2023-28910 is a high-severity vulnerability in Preh Car Connect Gmbh (Joynext Gmbh) Volkswagen Mib3 Infotainment System Oi Mqb, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 8.0/10. Published 2025-06-28.

How severe is CVE-2023-28910?

High severity. CVSS v3 base score is 8.0 out of 10.

Vulnerability in Preh Car Connect Gmbh (Joynext Gmbh) Volkswagen Mib3 Infotainment System Oi Mqb

CVE-2023-28910

A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled abortion flag eventually leading to bypassing assertion functions. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the referenced resources.

EPSS: 0.003 (27.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Preh Car Connect Gmbh (Joynext Gmbh) Volkswagen Mib3 Infotainment System Oi Mqb — versions 0

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

cve@asrg.io
cve@asrg.io (technical-description)
cve@asrg.io (third-party-advisory)

Frequently asked questions

What is CVE-2023-28910?: CVE-2023-28910 is a high-severity vulnerability in Preh Car Connect Gmbh (Joynext Gmbh) Volkswagen Mib3 Infotainment System Oi Mqb, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 8.0/10. Published 2025-06-28.
How severe is CVE-2023-28910?: High severity. CVSS v3 base score is 8.0 out of 10.