CVE-2018-9322

The CVE-2018-9322 entry describes a vulnerability in the Head Unit HU_NBT (Infotainment) used in BMW i/X/3/5/7 Series vehicles from 2012–2018. A local attacker with access to USB or OBD-II interfaces can bypass the firmware update code-signing protection, enabling execution of unsigned firmware a...

CVE-2018-9314: Protection Mechanism Failure

The Head Unit HUNBT aka Infotainment component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical access...

PT-2018-18969

Name of the Vulnerable Software and Affected Versions BMW HU NBT Infotainment component on vehicles produced in 2012 through 2018 Description The issue allows for a local attack when a USB device is plugged into the Head Unit HU NBT component. Recommendations For vehicles produced in 2012 through...

PT-2018-18971

Name of the Vulnerable Software and Affected Versions BMW HU NBT Infotainment component on BMW vehicles produced in 2012 through 2018 Description The issue affects the Head Unit HU NBT component, allowing an attack by an attacker with direct physical access. Recommendations For vehicles produced ...

Chinese Hackers Find Over a Dozen Vulnerabilities in BMW Cars

Chinese security researchers have discovered more than a dozen vulnerabilities in the onboard compute units of BMW cars, some of which can be exploited remotely to compromise a vehicle. The security flaws have been discovered during a year-long security audit conducted by researchers from Keen...

BMW multi models is the exposure of a common security vulnerability, a hacker remote attack-vulnerability warning-the black bar safety net

5 on 22 May, Tencent Cohen Laboratory released a BMW, many different models of 14 common security vulnerabilities, these vulnerabilities can be through physical contact and remote non-contact and other ways triggered, according to its official blog to reveal that at present all the vulnerability...

Volkswagen Cars Open To Remote Hacking, Researchers Warn

UPDATE – Over the last few years, automakers like Ford, Jeep, Nissan and Toyota have all suffered car-hacking vulnerabilities in their vehicles. Now, it looks like Volkswagen has been pulled into the mix after researchers discovered that in-vehicle infotainment IVI systems in certain...

Securing Our Connected Car Future with Panasonic

There are few more exciting frontiers of the Internet of Things IoT than connected cars. Gartner predicts that there will be 61 million vehicles with built-in connectivity on our roads by 2020. But as we drive ever closer to a future where autonomous vehicles are a commonplace sight, we must be...

FTC Releases Alert on Securing Personal Information When Using Rental Vehicles

The Federal Trade Commission FTC has released recommendations for consumers to protect their personal data when using rental vehicles. Rental vehicles may contain infotainment systems that can connect with personal devices to stream music, allow hands-free calls and texts, or guide navigation...

Hack by BMW portal vulnerability to tampering BMW vehicle set-bug warning-the black bar safety net

BMW ConnectedDrive portal to the presence of the two vulnerabilities may allow an attacker to manipulate with the BMW infotainment system vehicle settings. ! ConnectedDrive is the BMW car infotainment system name. The system can be in-car use, or by a series connection of a mobile application to...

Car dashdroid-Car infotainment - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Car dashdroid-Car infotainment published at the 'play' market has multiple vulnerabilities...

Connected Cars' Cybersecurity Falls Short

As automakers rush to market connected cars to feed drivers hungry for collision avoidance systems and self-parking features, security experts are urging the industry to pump its brakes and prioritize the their cars’ cyber defenses. In a report released Tuesday by IDC and the security firm...

Harman-Kardon Uconnect Vulnerability

OVERVIEW This advisory is a follow-up to the ICS-ALERT titled ICS-ALERT-15-203-01 FCA Uconnect VulnerabilityICS-CERT ALERT, https://ics-cert.us-cert.gov/alerts/ICS-ALERT-15-203-01, web site last accessed September 17, 2015. that was published July 22, 2015, on the NCCIC/ICS-CERT web site. Chris...