CVE-2022-27254

The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626.

• CWE-294

• https://drive.google.com/file/d/1MtmWfBs1r6Y3JN1HpbNsZqO1GcsdgPdc/view?usp=sharingExploit, Third Party Advisory
• https://github.com/HackingIntoYourHeart/Unoriginal-Rice-PattyExploit, Third Party Advisory
• https://github.com/nonamecoder/CVE-2022-27254Exploit, Third Party Advisory
• https://news.ycombinator.com/item?id=30804702Exploit, Issue Tracking, Third Party Advisory
• https://www.bleepingcomputer.com/news/security/honda-bug-lets-a-hacker-unlock-and-start-your-car-via-replay-attack/Exploit, Third Party Advisory
• https://www.theregister.com/2022/03/25/honda_civic_hack/Exploit, Third Party Advisory
• https://drive.google.com/file/d/1MtmWfBs1r6Y3JN1HpbNsZqO1GcsdgPdc/view?usp=sharingExploit, Third Party Advisory
• https://github.com/HackingIntoYourHeart/Unoriginal-Rice-PattyExploit, Third Party Advisory
• https://github.com/nonamecoder/CVE-2022-27254Exploit, Third Party Advisory
• https://news.ycombinator.com/item?id=30804702Exploit, Issue Tracking, Third Party Advisory
• https://www.bleepingcomputer.com/news/security/honda-bug-lets-a-hacker-unlock-and-start-your-car-via-replay-attack/Exploit, Third Party Advisory
• https://www.theregister.com/2022/03/25/honda_civic_hack/Exploit, Third Party Advisory

Published

Mar 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27246An issue was discovered in MISP before 2.4.156. An SVG org l…6.1
• CVE-2022-27247onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 all…5.3
• CVE-2022-27248A directory traversal vulnerability in IdeaRE RefTree before…6.5
• CVE-2022-27249An unrestricted file upload vulnerability in IdeaRE RefTree …8.8
• CVE-2022-2725A vulnerability was found in SourceCodester Company Website …6.1
• CVE-2022-27250The UNISOC chipset through 2022-03-15 allows attackers to ob…9.8
• CVE-2022-27255In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG f…9.8
• CVE-2022-27256A PHP Local File inclusion vulnerability in the Redbasic the…6.1
• CVE-2022-27257A PHP Local File Inclusion vulneraility in the default Redba…7.5
• CVE-2022-27258Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzi…6.1
• CVE-2022-2726A vulnerability classified as critical has been found in SEM…9.8
• CVE-2022-27260An arbitrary file upload vulnerability in the file upload co…9.8