---
cve: "CVE-2025-69515"
severity: "CRITICAL"
cvss: 9.1
epss: "0.5%"
vendor: "n/a"
kev: false
exploited: false
published: "2026-04-07 00:00:00"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-10-27T07:06:09+01:00"
---

# CVE-2025-69515

> 9.1 CRITICAL · 🧪 PoC

## Beschreibung

An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting in the device reporting an incorrect or static location.

## CNA-Record (Kanon, cvelistV5)

- CNA: **mitre**
- State: PUBLISHED
- Stand: 2026-07-05 01:33:41

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **poc**
  - Automatable: **yes**
  - Technical Impact: **partial**

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Keine | good |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Schwachstellen-Klasse

- **CWE-941** — Incorrectly Specified Destination in a Communication Channel
  The product creates a communication channel to initiate an outgoing request to an actor, but it does not correctly specify the intended destination for that actor.

## Referenzen

- <https://github.com/thorat-shubham/JXL_Infotainment_CVE-2025-69515/blob/main/README.md>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2025-69515/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_