Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
JXL_Infotainment_CVE-2025-69515 — Proof-of-concept exploit for CVE-2025-69515 demonstrating static GPS spoofing on JXL 9-inch Android infotainment units via SDR-based signal injection, with no integrity validation on the GNSS input path. | Kitploit
Tools/GitHubGitHub/thorat-shubham/jxl_infotainment_cve-2025-69515
Embedded Systems SecurityIoT SecurityVulnerability AnalysisExploitationPenetration TestingHardware & IoT SecurityRed Teaming
GitHubthorat-shubham/jxl_infotainment_cve-2025-69515

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

JXL_Infotainment_CVE-2025-69515

Proof-of-concept exploit for CVE-2025-69515 demonstrating static GPS spoofing on JXL 9-inch Android infotainment units via SDR-based signal injection, with no integrity validation on the GNSS input path.

View Repository
445 months agoNot yet reviewed

CVE-2025-69515

Attack Name

Attack

📂 Additional Details

Afftected product

  • < JXL 9 Inch Car Android Double Din Player - Android version 12.0 >

Affected Components

  • GNSS Receiver Module / GPS Chipset
  • Infotainment Navigation Module
  • Location Services Framework

Attack Vector

  • The infotainment unit can be targeted by broadcasting spoofed GPS signals using an SDR device. Because the GNSS input path lacks integrity validation, the system may accept stronger spoofed signals transmitted from nearby, enabling remote location manipulation without physical access.

CVSS Score : 5.4

  • AV:A (Adjacent): Attacker must be in RF proximity to broadcast spoofed GPS signals
  • AC:L (Low): No complex conditions beyond signal transmission
  • PR:N (None): No authentication required
  • UI:N (None): No user interaction needed
  • S:U (Unchanged): Impact limited to the infotainment system
  • C:N (None): No data confidentiality impact
  • I:L (Low): Integrity impact (location data manipulated)
  • A:L (Low): Availability impact (navigation reliability affected)

Credits

  • Researcher: Shubham S. Thorat
  • Organization: Payatu Security Consulting Pvt. Ltd.

📜 References

  • CVE-2025-69515 Report

POC

Demo GIF

Download Tool