PatchTheCVECVE-2023-33281: The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, wh
CVE-2023-33281 is a medium-severity flaw (CVSS 6.5) affecting sylphy classic 2021 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in the exploit demonstration does not match any technology that Nissan provides to customers.
Why this priority
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.6% (top 53%) |
| CISA exploited list | No |
| Weakness | CWE-294 |
| Published | 2023-05-22 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-33281?
sylphy classic 2021 firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2023-33281 being exploited?
CVE-2023-33281 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-33281 affect?
CVE-2023-33281 affects sylphy classic 2021 firmware. Severity is medium (CVSS 6.5). The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for examp
How urgent is CVE-2023-33281?
Priority 39/100. Public exploit reference