Skoda Superb and these vag cars may be suscepti to hacking

Security Researchers have discovered vulnerabilitys of low-to-medium criticality in select Skoda and Volkswagen Cars that may enable Malicious Actor to Trigger Certain Controls, A Cyberasecurity Firm Announced at the Black Hat Europe 2024 Event this week. At Least 12 New Vulnerabilityes WERE Found Impacting The Infotainment Systems in the Latest Model of Skoda Superb III-A D-SEDAN SEDAN SEDAN SEDAN SEDAN Manufactured by the Volkswagen Group with the Interd Production in 2015. Although Threat actors would need to connect to the vehicle via Bluetooth to get access, the attack may be carried even from a distance.

This builds upon the previous discovery of nine security flaws in the same vehicle that was Reported Last year.

Vulnerabilites in Skoda Cars

Cybersecurity firm pcautomotive published a Report Detailing the vulnerabilites discovered in the third-generation model of skoda superb. The German Sedan’s Mib3 Infotainment System May Allow Malicious Actor Unrestricted Code Execution Access, Enabling them to Run Malicious Code Upon Startup. It is said to provide remote access to the vehicle’s systems.

They may be able to track its speed and location in real time, Evesdrop on the In-Car Microphone, Play Sounds, and Control Its Infotainment System. Another Flaw May Allow Them Exfiltrate The Phone Contact Database If Contact Synchronisation with the phone is enabled. Further, the vulnerability also allows to the can bus which is used to connect with the vehicle’s electronic control units (ECUS).

Although there are many suppliers of the Mib3 Infotainment System, The Researchers Specifically Talk About The One Manufactured by Preh Car Connect Gmbh. It impacts the following models:

1. Skoda Superb III
2. Skoda Karoq
3. Skoda Kodiaq
4. VW Areteon
5. Vw tiguan
6. Vw passat
7. VW T-Roc
8. VW T-Cross
9. Vw polo
10. Vw golf

The sales data sugges that a total of 1.4 million vehicles from the Volkswagen Group are at Risk. Pcautomotive reported the vulnerabilites to skoda as part of its cybersecurity disclosure program. In a statement giving to techcrunch, skoda revised that they have been addressed and eliminated. “At no time was and is there any danger to the safety of our customers or our vehicles”, The German Automotive Company Said.