CVE-2020-5551

CVE-2020-5551 describes a critical vulnerability in Toyota 2017 Model Year Display Control Units (DCUs) found in various Lexus and Toyota models manufactured outside Japan between October 2016 and October 2019. An unauthenticated attacker within Bluetooth range can exploit this to cause a denial of service or execute arbitrary commands. The vulnerability carries a high CVSS score of 8.8, indicating a severe risk due to its adjacent attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While critical vehicle controls are not directly affected, an attacker could send diagnostic commands to ECUs, leading to limited availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability. Its EPSS score is low, suggesting a low likelihood of exploitation in the wild despite its high severity.