Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.4

Maruti Suzuki SmartPlay Infotainment Hub uses default passwords

CVE-2024-6245 · published 2 years ago
Summary

A security issue in the Maruti Suzuki SmartPlay infotainment system for Linux-based modules allows an attacker to try common or default usernames and passwords. This could lead to unauthorized access to the system. Maruti Suzuki has likely already addressed this issue, but owners of affected vehicles should check with the manufacturer for any available updates or patches.

Original advisory text
Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker to try common or default usernames and passwords.The issue was detected on a ...
Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market.

This issue affects SmartPlay: 66T0.05.50.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.4 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-1392Use of Default Credentials
Timeline
Published28 Oct 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-6245 · NVD
Track software like this
Free during beta