EUVD-2015-5564

Malware in sbrugna...

SinoTrack GPS Devices Vulnerable to Remote Vehicle Control via Default Passwords

Two security vulnerabilities have been disclosed in SinoTrack GPS devices that could be exploited to control certain remote functions on connected vehicles and even track their locations. "Successful exploitation of these vulnerabilities could allow an attacker to access device profiles without...

CVE-2023-29389: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is validated"...

CVE-2019-9493

The MyCar Controls of AutoMobility Distribution Inc., mobile application contains hard-coded admin credentials. A remote unauthenticated attacker may be able to send commands to and retrieve data from a target MyCar unit. This may allow the attacker to learn the location of a target, or gain...

Researchers Show Weaknesses of Vehicle Software Systems

A new paper by a group of academic researchers has exposed a set of serious weaknesses in the software systems that control many modern cars, giving them the ability to lock passengers inside the car, cut the car’s brakes and perform other interesting tricks. The work, done by researchers at the...