Default Passwords Expose Two Automakers’ Systems, Allow Remote Vehicle Control

Security researchers discovered vulnerabilities in the online systems of two unnamed automobile manufacturers that allowed them to take over customer accounts and remotely unlock and start connected vehicles.

Both automakers reportedly fixed the affected systems within approximately two hours of receiving the researchers’ reports.

The findings revealed how weaknesses in the systems supporting connected-car mobile applications could allow unauthorised access to customer accounts and vehicle controls without directly compromising the vehicles.

FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders How Did a Default Password Expose Connected Cars?

Automakers Fix Vulnerabilities After Security Disclosure The affected US systems were reportedly secured within approximately two hours of the researchers notifying the automakers.