CVE-2017-9647

CVE-2017-9647 describes a stack-based buffer overflow in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset, impacting numerous BMW, Ford, Infiniti, and Nissan vehicle models from various years. An attacker with physical access to the Telematics Control Unit (TCU) can exploit this vulnerability by sending specially crafted AT commands, potentially leading to arbitrary code execution on the baseband radio processor. Rated 6.6 MEDIUM on CVSS, the attack requires physical access and low privileges, but can result in high impact to confidentiality, integrity, and availability. While there is no public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness despite no active exploitation in the CISA KEV catalog.