Car vulnerabilities by https://padlet.com/grikisk2/7sqpgz42h0qge092 en-us 2025-01-31 11:51:47 UTC 2025-01-31 12:15:50 UTC hello@padlet.com General Motors’ 2009 Chevy Impala grikisk2 https://padlet.com/grikisk2/7sqpgz42h0qge092/wish/3311055030 Vulnerabilities:

Weak authentication - allowed attackers to remotely unlock and start vehicle.

Unsecured CAN bus - allowed attacked to send malicious commands to vehicle.

]]> 2025-01-31 11:57:44 UTC https://padlet.com/grikisk2/7sqpgz42h0qge092/wish/3311055030 Similar grikisk2 https://padlet.com/grikisk2/7sqpgz42h0qge092/wish/3311062330 In all cases attackers managed to get remote access to the systems.

Lack of encryption on communication protocols used.

]]> 2025-01-31 12:05:56 UTC https://padlet.com/grikisk2/7sqpgz42h0qge092/wish/3311062330 Different grikisk2 https://padlet.com/grikisk2/7sqpgz42h0qge092/wish/3311064587 2025-01-31 12:08:57 UTC https://padlet.com/grikisk2/7sqpgz42h0qge092/wish/3311064587 BMW grikisk2 https://padlet.com/grikisk2/7sqpgz42h0qge092/wish/3311065692 Vulnerabilities:

Unencrypted communication - attackers tricked the car into communicating with a fake BMW server.

SIM Card Exploits - attackers could utilize cellular vulnerabilities.

]]> 2025-01-31 12:10:10 UTC https://padlet.com/grikisk2/7sqpgz42h0qge092/wish/3311065692 Corvette grikisk2 https://padlet.com/grikisk2/7sqpgz42h0qge092/wish/3311070194 The ODB was exploited using a dongle which was created by a French company

]]> 2025-01-31 12:15:49 UTC https://padlet.com/grikisk2/7sqpgz42h0qge092/wish/3311070194