CERT-In warns of security vulnerabilities in Tata Motors' connected vehicle apps

The vulnerabilities affect iRA 2.0 versions 26.7.3 and below, and iRA.ev versions 26.7.2 and below.

The applications cater to Tata Motors' internal combustion engine (ICE) and electric vehicle (EV) customers, respectively, and provide access to connected services such as remote vehicle commands, vehicle status, health monitoring and trip information.

The vulnerabilities flagged by CERT-In come amid growing cybersecurity concerns around connected vehicles globally.

The vulnerabilities affect iRA 2.0 versions 26.7.3 and below, and iRA.ev versions 26.7.2 and below.

The applications cater to Tata Motors' internal combustion engine (ICE) and electric vehicle (EV) customers, respectively, and provide access to connected services such as remote vehicle commands, vehicle status, health monitoring and trip information.