CVE-2022-37305: Honda Firmware

Medium severity, CVSS 6.4. EPSS: 1% chance of exploitation in the next 30 days.

The Remote Keyless Entry (RKE) receiving unit on certain Honda vehicles through 2018 allows remote attackers to perform unlock operations and force a resynchronization after capturing five consecutive valid RKE signals over the radio, aka a RollBack attack. The attacker retains the ability to unlock indefinitely.

Affected products

• Honda Honda Firmware: up to and including 2018

Published 2022-08-24. Last modified 2026-06-17.