What is the official website of Škoda Österreich ?

The official website of Škoda Österreich is https://www.skoda.at.

What is Škoda Österreich's cybersecurity risk score?

Škoda Österreich has an AI-generated cybersecurity risk score of 747 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Škoda Österreich experienced?

According to Rankiteo, Škoda Österreich currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Škoda Österreich been affected by any supply chain cyber incidents ?

According to Rankiteo, Škoda Österreich has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Škoda Österreich have SOC 2 Type 1 certification ?

According to Rankiteo, Škoda Österreich is not certified under SOC 2 Type 1.

Does Škoda Österreich have SOC 2 Type 2 certification ?

According to Rankiteo, Škoda Österreich does not hold a SOC 2 Type 2 certification.

Does Škoda Österreich comply with GDPR ?

According to Rankiteo, Škoda Österreich is not listed as GDPR compliant.

Does Škoda Österreich have PCI DSS certification ?

According to Rankiteo, Škoda Österreich does not currently maintain PCI DSS compliance.

Does Škoda Österreich comply with HIPAA ?

According to Rankiteo, Škoda Österreich is not compliant with HIPAA regulations.

Does Škoda Österreich have ISO 27001 certification ?

According to Rankiteo,Škoda Österreich is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Škoda Österreich operate in ?

Škoda Österreich operates primarily in the Motor Vehicle Manufacturing industry.

How many employees does Škoda Österreich have ?

Škoda Österreich employs approximately 0 people worldwide.

Does Škoda Österreich own any subsidiaries ?

Škoda Österreich presently has no subsidiaries across any sectors.

How many LinkedIn followers does Škoda Österreich have ?

Škoda Österreich's official LinkedIn profile has approximately 1,348 followers.

What is the NAICS classification code for Škoda Österreich ?

Škoda Österreich is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Does Škoda Österreich have a Crunchbase profile ?

No, Škoda Österreich does not have a profile on Crunchbase.

Does Škoda Österreich have a LinkedIn profile ?

Yes, Škoda Österreich maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/skodaoesterreich.

How many cybersecurity incidents has Škoda Österreich experienced ?

As of September 14, 2026, Rankiteo reports that Škoda Österreich has not experienced any cybersecurity incidents.

How many peer or competitor companies does Škoda Österreich have ?

Škoda Österreich has an estimated 13,059 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Škoda Österreich

Boost Score +25 with badge (5 left)

747

/1000

Moderate

772

/1000

Fair

Škoda Österreich Vendor Cyber Rating & Cyber Score

skoda.at

Add Your Compliance Badge

Importeur für ŠKODA Fahrzeuge in Österreich

Škoda Österreich

Škoda Österreich CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Škoda Österreich Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Škoda Österreich

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Škoda Österreich in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Škoda Österreich in 2026.

Incident Types Škoda Österreich vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Škoda Österreich in 2026.

Incident History - Škoda Österreich (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Škoda Österreich Subsidiaries

Škoda Österreich

Motor Vehicle Manufacturing

Website: https://www.skoda.at

Company Size: 0

106

Porsche HoldingWholesale

Volkswagen Group Retail SpainMotor Vehicle Manufacturing

Sevilla WagenMotor Vehicle Manufacturing

Audi ÖsterreichMotor Vehicle Manufacturing

Volkswagen Group SingaporeMotor Vehicle Manufacturing

Porsche HungariaMotor Vehicle Manufacturing

SIVAWholesale Motor Vehicles and Parts

Audi PortugalMotor Vehicle Manufacturing

Volkswagen PortugalMotor Vehicle Manufacturing

Škoda PortugalMotor Vehicle Manufacturing

Lamborghini LisboaMotor Vehicle Manufacturing

Volkswagen Veículos ComerciaisMotor Vehicle Manufacturing

Bentley LisboaMotor Vehicle Manufacturing

Saottini AutoMotor Vehicle Manufacturing

Porsche ColombiaMotor Vehicle Manufacturing

Audi ColombiaFabricación de vehículos de motor

Amarok ColombiaTruck Transportation

Skoda ColombiaTruck Transportation

VW Transporter ColombiaTruck Transportation

Porsche Bank GroupFinancial Services

Porsche SlovenijaMotor Vehicle Manufacturing

Porsche Inter Auto - Österreichs größte AutohandelsgruppeMotor Vehicle Manufacturing

RINALDI S.P.A.Retail

Porsche Croatia d.o.o.Motor Vehicle Manufacturing

Porsche Finance Group RomaniaFinancial Services

Porsche AlbaniaAutomotive

Erre Esse S.p.A.Motor Vehicle Manufacturing

Porsche Media & CreativeAdvertising Services

Volkswagen Passenger Cars Malaysia (VPCM)Motor Vehicle Manufacturing

Autocentro BaistrocchiMotor Vehicle Manufacturing

Porsche Automotive Investment GmbH, China BranchesMotor Vehicle Manufacturing

Porsche Inter Auto S - SerbiaMotor Vehicle Manufacturing

Porsche Center BelgradeRetail Motor Vehicles

Porsche SeverMotor Vehicle Manufacturing

Porsche AdaMotor Vehicle Manufacturing

Porsche Novi SadMotor Vehicle Manufacturing

Eurocar FirenzeRetail

Porsche WienMotor Vehicle Manufacturing

Porsche Inter Auto CZMotor Vehicle Manufacturing

DorigoniMotor Vehicle Manufacturing

Porsche SCG dooWholesale Motor Vehicles and Parts

Audi SrbijaWholesale Motor Vehicles and Parts

Volkswagen SrbijaWholesale Motor Vehicles and Parts

MOON POWER SrbijaElectric Power Transmission, Control, and Distribution

Porsche SlovakiaMotor Vehicle Manufacturing

Porsche Inter Auto d.o.o.Motor Vehicle Manufacturing

Porsche Zentrum Oberer ZürichseeMotor Vehicle Manufacturing

Porsche Ukraine LLCMotor Vehicle Manufacturing

Porsche Inter Auto SloveniaMotor Vehicle Manufacturing

Porsche Volkswagen Servicios Financieros Chile SpAFinancial Services

Porsche BHWholesale

Gruppo Eurocar ItaliaAutomotive

Porsche Finance Group UkraineFinancial Services

Porsche MovilidadFinancial Services

Volkswagen Group Retail FranceMotor Vehicle Manufacturing

VGRF Business SolutionsRetail Motor Vehicles

Porsche Inter Auto BG EOODMotor Vehicle Manufacturing

Porsche Finance Group SloveniaFinancial Services

Porsche Inter Auto Slovakia, spol. s r.o.Motor Vehicle Manufacturing

VGRDMotor Vehicle Manufacturing

Volkswagen Automobile HamburgAutomotive

Audi Stuttgart GmbHMotor Vehicle Manufacturing

Volkswagen Automobile Stuttgart GmbHAutomotive

Audi HamburgMotor Vehicle Manufacturing

MAHAG GruppeMotor Vehicle Manufacturing

Audi Frankfurt GmbHMotor Vehicle Manufacturing

Audi Berlin GmbHMotor Vehicle Manufacturing

Schwaba GmbHMotor Vehicle Manufacturing

Volkswagen Automobile Leipzig GmbHMotor Vehicle Manufacturing

Audi Leipzig GmbHMotor Vehicle Manufacturing

Audi Hannover GmbHMotor Vehicle Manufacturing

Auto & Service PIA GmbHMotor Vehicle Manufacturing

Volkswagen Automobile Chemnitz GmbHMotor Vehicle Manufacturing

Volkswagen Automobile Rhein-Neckar GmbHMotor Vehicle Manufacturing

Volkswagen Automobile Berlin GmbHMotor Vehicle Manufacturing

Volkswagen Automobile Frankfurt GmbHMotor Vehicle Manufacturing

Eurocar Friuli Venezia GiuliaAutomotive

Porsche Leasing MacedoniaFinancial Services

Porsche Inter Auto BHMotor Vehicle Manufacturing

DIGILAB ITALIA Srl - Filiale Italiana di PORSCHE INFORMATIK GmbHIT Services and IT Consulting

PAIG Japan Automobile Investment GKRetail Motor Vehicles

BONALDI MOTORI SPA Concessionaria Auto e Veicoli CommercialiMotor Vehicle Manufacturing

Centro Porsche BergamoMotor Vehicle Manufacturing

Bonaldi BusinessFinancial Services

Porsche BGWholesale

MOON POWER BulgariaUtilities

SEAT Česká republikaVýroba motorových vozidel

Porsche Inter Auto HungariaRetail Motor Vehicles

Volkswagen Puchong by PHS AutohausRetail Motor Vehicles

Porsche Informatik FranceIT Services and IT Consulting

Porsche Inter Auto PolskaAutomotive

Centrum Flotowe Porsche Inter AutoTransportation, Logistics, Supply Chain and Storage

SEAT Center ArrábidaMotor Vehicle Manufacturing

Din BilMotor Vehicle Manufacturing

Porsche Center StockholmMotor Vehicle Manufacturing

Volkswagen StockholmMotor Vehicle Manufacturing

Porsche ChileMotor Vehicle Manufacturing

Porsche Inter Auto UkraineRetail

Porsche RomaniaAutomotive

Porsche Informatik GmbHIT Services and IT Consulting

Vicentini S.p.A. | Gruppo Eurocar ItaliaAutomotive

MOON POWERUtilities

Porsche Inter Auto RomaniaMotor Vehicle Manufacturing

Porsche MacedoniaMotor Vehicle Manufacturing

SOAUTO VGRPMotor Vehicle Manufacturing

USADOS VolkswagenMotor Vehicle Manufacturing

Loading…

Škoda Österreich Similar Companies

Discount Tire

discounttire.com

With more than 1,200 stores in the United States, Discount Tire has grown to become the leading independent retailer of tires and wheels. The company was founded in 1960 when founder Bruce T. Halle rented a building on Stadium Boulevard in Ann Arbor, MI. Although the inventory consisted of only six tires and the showroom was not quite the showroom we see today, faith, vision and hard work were then, and still remain, the foundation on which this company has grown and prospered. As with any new start up, Bruce Halle's venture faced numerous challenges - perhaps one of the biggest being that he didn't own an air compressor. Having only six tires and a portable air tank, Halle would race back and forth to a nearby gas station, filling the tires with air as he sold them. Day by day, tire by tire, this one-man operation slowly grew into what is now one of the most recognized names in the industry. Discount Tire has a vision that not only lives but thrives in the hearts of its employees each and every day. From part-time to full-time employees at the store, regional or corporate level our employees work to be the best in the business. One common thread running through the hearts of everyone within the organization remains the same - treat customers and fellow employees with respect and fairness. Care for those in need, always do what is right, work hard, be responsible and have fun. The employees of Discount Tire represent our philosophy and its brand by remaining knowledgeable, friendly and honest. By offering the highest level of customer service, more product choices and the lowest prices, they have earned the right to be considered trusted experts. Building customer relationships has allowed Discount Tire to become a leader in the industry. Our continual growth not only provides opportunities for employee advancement, but allows more customers to remain confident when choosing us for all of their tire and wheel needs.

Toyota North America

cb toyota.com

At Toyota, we’re known for making some of the highest quality vehicles on the road. But there is more to our story. We believe in putting people first and creating opportunities for our team members to build careers as unique as they are. As one of the world’s most admired brands, we are leading the way to the future of mobility, so everyone can move freely, happily and comfortably. We have big dreams and believe that nothing is impossible. Ready to Dream, Do and Grow with us?

BYD

cb bydglobal.com

Established in 1995, BYD is a top high-tech enterprise in China specializing in IT, automobile, and new energy.BYD is the largest supplier of rechargeable batteries in the globe, and has the largest market share for Nickel-cadmium batteries, handset Li-ion batteries, cell-phone chargers and keypads worldwide. It also has the second largest market share for cell-phone shells in the globe. BYD Auto becomes the most innovative independent national auto brand and leads the field of electric vehicles with unique technologies. In the field of new energy, BYD has developed green products such as solar farm, battery energy storage station, electric vehicle, and LED, etc. It will continue to lead the new energy revolution in the world!

Pirelli

cb pirelli.com

Pirelli was founded in Milan in 1872 and today stands as a global brand known for its cutting-edge technology, high-end production excellence and passion for innovation that draws heavily on its Italian roots. With 18 production plants in 12 countries and a commercial presence in over 160, Pirelli has around 30,700 employees and had a turnover of about 5.3 billion euro (in 2021). It is among the world’s major producers of tyres and associated services and the only one focused solely on the Consumer tyre market, which includes tyres for cars, motorcycles and bicycles. Pirelli’s technological excellence is also nourished by the innovation and competencies derived from sporting competitions, in which it has been active for over 110 years. Currently, the Company participates in over 350 car and motorcycle sport events and, since 2011, it has been the exclusive tyre supplier to the Formula 1© World Championship and will be the sole Global Tyre Partner until 2024. All of this has grown from a strong commitment to Research and Development based on an “Open Innovation” model. In 2021, Pirelli’s investment in R&D equaled around 6% of its revenues from High Value products, one of the highest levels among the world’s major tyre producers. Pirelli boasts around 2,000 people engaged in R&D, located at its Milan headquarters and 12 local technology centres, and a portfolio of more than 6,700 patents. The Pirelli brand is an international icon standing for technology, tastefulness and Italian excellence, synonymous with safety and reliability. Represented by the unmistakable “long P” logo for more than a century, the Pirelli name is associated with exclusivity, luxury and innovation, strengthening its distinctive position as a supplier to luxury car manufacturers. Pirelli continually enhances the reputation and strength of the brand through its involvement in motorsport events and competitions, cultural and artistic projects and initiatives benefitting local communities.

Royal Enfield

royalenfield.com

The oldest motorcycle brand in continuous production, Royal Enfield made its first motorcycle in 1901. A division of Eicher Motors Limited, Royal Enfield has created the mid-sized motorcycle segment in India with its unique and distinctive modern classic bikes. Royal Enfield operates in 60+ countries across the world with more than 3000 retail touch points globally, 5 CKD units (Argentina, Brazil, Colombia, Nepal, & Thailand), 3 state-of-the-art manufacturing facilities based out of Chennai, India and two technical centers - in India and in the UK. Watch Royal Enfield's incredible journey here - https://youtu.be/QbHgJ6flUt4

General Motors

gm.com

General Motors’ vision is to create a world with Zero Crashes, Zero Emissions and Zero Congestion, and we have committed ourselves to leading the way toward this future. Today, we are in the midst of a transportation revolution, and we have the ambition, the talent and the technology to realize the safer, better and more sustainable world we want. As an open, inclusive company, we’re also creating an environment where everyone feels welcomed and valued for who they are. One team, where all ideas are considered and heard, where everyone can contribute to their fullest potential, with a culture based in respect, integrity, accountability and equality. Our team brings wide-ranging perspectives and experiences to solving the complex transportation challenges of today and tomorrow. For information on the GM Privacy Statement, please visit http://www.gm.com/privacy-statement.html

FORVIA

forvia.com

FORVIA comprises the complementary technology and industrial strengths of Faurecia and HELLA. With over 249 industrial sites and 78 R&D centers, 150,000 people, including more than 15,000 engineers across 40+ countries, FORVIA provides a unique and comprehensive approach to the automotive challenges of today and tomorrow. Composed of 6 business groups with 24 product lines, and a strong IP portfolio of over 12,900 patents, FORVIA is focused on becoming the preferred innovation and integration partner for OEMs worldwide. FORVIA aims to be a change maker committed to foreseeing and making the mobility transformation happen.

FORVIA HELLA

hella.com

FORVIA HELLA is a listed international automotive supplier. As a company of the FORVIA Group, FORVIA HELLA stands for high-performance lighting technology and vehicle electronics and, with the Lifecycle Solutions Business Group, also covers a broad service and product portfolio for the spare parts and workshop business as well as for manufacturers of special vehicles. With currently around 35,000 employees at over 125 locations, the Company is active worldwide and generated adjusted sales of €8.1 billion in fiscal year 2024. www.forvia-hella.com Legal notice: https://www.hella.com/legalnotice Data protection notice: https://www.hella.com/hella-com/en/Data-protection-65.html

Bridgestone Americas

cb bridgestoneamericas.com

Bridgestone Americas, Inc. (BSAM), headquartered in Nashville, Tennessee, and Bridgestone Europe, Middle East and Africa (BSEMEA), headquartered in Brussels, Belgium, operate collectively as a “Bridgestone West” strategic region. This region services the strategic business needs of teams across the Americas, Europe, Middle East and Africa. BSAM and BSEMEA are subsidiaries of Bridgestone Corporation, globally headquartered in Japan. Bridgestone and its subsidiaries develop, manufactures and markets a diverse portfolio of original equipment and replacement tires, tire-centric solutions, mobility solutions and other rubber-associated and diversified products that deliver social and customer value. These best-in-class offerings are sold to consumers and fleet customers around the world under the trusted Bridgestone and Firestone brand names. With more than 50 production facilities and 55,000 employees, the Bridgestone Americas (BSAM) enterprise spans from Canada to Argentina. Business units of Bridgestone Americas include Bridgestone Retail Operations, the world’s largest network of company-owned retail tire and automotive service centers; Bandag, a leader in commercial tire retreading worldwide and Firestone Industrial Products, a leading provider of technologically advanced air springs for commercial and passenger vehicle applications. At Bridgestone, you are Free to Be We believe people can only provide superior service and quality to others when they bring their whole self to work. We believe in championing all perspectives, individuals and teams because we understand the importance of seeing the world and our business through many different lenses. We are building a team as diverse as the world we serve. So, show us what you are made of, because who you are is what we need. To view our terms of use, visit https://www.bridgestoneamericas.com/en/terms-of-use.

Loading…

NEWS

Škoda Österreich CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-90603

SUMMARY

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be launched remotely. The name of the patch is f013270957f75e439eaf97eb2a93decb32a4543e. Applying a patch is advised to resolve this issue.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90602

SUMMARY

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 3.5)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:N

cvss3

Base Score: 3.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.1

REFERENCES

CVE-2026-90601

SUMMARY

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90600

SUMMARY

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15892

SUMMARY

The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mgmt/src/settings_mgmt.c allocate a key_name buffer (and, for read, a data buffer) via k_malloc() when CONFIG_MCUMGR_GRP_SETTINGS_BUFFER_TYPE_HEAP is enabled, relying on the end: label to k_free() them. When CONFIG_MCUMGR_GRP_SETTINGS_ACCESS_HOOK is also enabled and the application access hook rejects a request by returning status MGMT_CB_ERROR_RC, the handler executed return ret_rc; directly, bypassing end: and leaking the heap allocation on every rejected request. The settings handlers are reachable over the unauthenticated SMP transport (Bluetooth LE, UART, or UDP, depending on product configuration). The access hook is the mechanism applications use to deny unauthorized settings access, and MGMT_CB_ERROR_RC is a common rejection style, so an attacker who can send settings read/write/delete commands that the hook rejects triggers a heap leak on each attempt. Because the leaked memory is never reclaimed until reboot, a sustained stream of rejected requests monotonically exhausts the kernel heap until k_malloc() fails, denying mcumgr service and impacting any other heap consumer on the device — a denial of service. The impact is availability-only; there is no memory corruption or information disclosure. Only configurations that select the heap buffer type, enable the access hook, and register a hook that returns MGMT_CB_ERROR_RC are affected (the default stack buffer type cannot leak).

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Škoda Österreich Vendor Cyber Rating & Cyber Score

Škoda Österreich A.I CyberSecurity Scoring

Škoda Österreich CyberSecurity News & History

Škoda Österreich Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Škoda Österreich

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Škoda Österreich vs Motor Vehicle Manufacturing Industry Avg (This Year)

Incident History - Škoda Österreich (X = Date, Y = Severity)

Škoda Österreich Subsidiaries

Škoda Österreich

Škoda Österreich Similar Companies

Discount Tire

Toyota North America

BYD

Pirelli

Royal Enfield

General Motors

FORVIA

FORVIA HELLA

Bridgestone Americas

Škoda Österreich CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Škoda Österreich CyberSecurity News & History

Škoda Österreich Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Škoda Österreich

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Škoda Österreich vs Motor Vehicle Manufacturing Industry Avg (This Year)

Incident History - Škoda Österreich (X = Date, Y = Severity)

Škoda Österreich Subsidiaries

Škoda Österreich

Škoda Österreich Similar Companies

Discount Tire

Toyota North America

BYD

Pirelli

Royal Enfield

General Motors

FORVIA

FORVIA HELLA

Bridgestone Americas

Škoda Österreich CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo