Tesla Car Hacked Remotely From Drone Via Zero-Click Exploit
Published on May 04, 2021 at 12:00PM
wiredmikey shares a report from SecurityWeek: Security researchers have shown how a Tesla — and possibly other cars — can be hacked remotely without any user interaction from a drone. This was the result of research conducted last year by Ralf-Philipp Weinmann of Kunnamon and Benedikt Schmotzle of Comsecuris. The attack, dubbed TBONE, involves exploitation of two vulnerabilities affecting ConnMan, an internet connection manager for embedded devices. A hacker who exploits the vulnerabilities can perform any task that a regular user could from the infotainment system. That includes opening doors, changing seat positions, playing music, controlling the air conditioning, and modifying steering and acceleration modes. They showed how an attacker could use a drone to launch an attack via Wi-Fi to hack a parked car and open its doors from a distance of up to 100 meters (roughly 300 feet). They claimed the exploit worked against Tesla S, 3, X and Y models. “Tesla patched the vulnerabilities with an update pushed out in October 2020, and it has reportedly stopped using ConnMan,” the report notes. Since the ConnMan component is widely used in the automotive industry, similar attacks could be launched against other vehicles.
Read more of this story at Slashdot.