Friday, March 29, 2024

Honda Bug Let Attackers Unlock and Start the Car

Honda and Acura have recently been found to have a vulnerability that allows an attacker to remote start the engine and unlock your car from a nearby distance using a ‘replay attack.’

It involves taking control of the remote keyless entry system of your car by capturing RF signals sent from your key fob to it. Some Honda owners may be able to protect themselves against this attack, according to researchers. 

Older Honda models remain unfixed in most instances, according to researchers. And this vulnerability has been discovered by computer scientists:-

  • Ayyappan Rajesh
  • Blake Berry

Wireless Unlocking to keyless Engine Start

An adversary can remotely unlock and start some Honda and Acura car models using a vulnerability disclosed by several researchers. Here the cybersecurity analysts tracked the vulnerability as:-

  • CVE-2022-27254: PoC for vulnerability in Honda’s Remote Keyless System.

It’s a MitM attack in which an attacker intercepts the RF signals from a remote key fob to manipulate the signals, and at last, re-sends the signals to unlock the car at a later time.

Moreover, the researchers filmed a video showing the flaw’s remote engine start functionality. However, the exploit code has not yet been shared, nor have technical details or proof-of-concept details been provided.

Models Affected

The vehicles affected by this vulnerability primarily include the models from 2016-2020:-

  • Honda Civic LX
  • Honda Civic EX
  • Honda Civic EX-L
  • Honda Civic Touring
  • Honda Civic Si
  • Honda Civic Type R
  • Acura TSX
  • Accord V6 Touring Sedan
  • Honda Civic Hatchback

In the event of a successful exploit, the captured commands could also be manipulated and re-transmitted in order to achieve a completely different result.

Tools Used

Here below we have also mentioned all the tools that are used:-

  • FCCID.io
  • HackRF One
  • Gqrx
  • GNURadio

Recommendations

Here below we have mentioned all the mitigations recommended by the experts.

For manufacturers:-

  • Manufacturing companies must implement rolling codes, often called hopping codes.

For consumers:-

  • Key fobs should be protected with Faraday pouches.
  • Consider utilizing the PKE rather than the RKE because of the proximity needed to clone/read the signal.
  • To mitigate this attack, you can reset your key fob at the dealership if you believe you have been impacted.
Website

Latest articles

IT and security Leaders Feel Ill-Equipped to Handle Emerging Threats: New Survey

A comprehensive survey conducted by Keeper Security, in partnership with TrendCandy Research, has shed...

How to Analyse .NET Malware? – Reverse Engineering Snake Keylogger

Utilizing sandbox analysis for behavioral, network, and process examination provides a foundation for reverse...

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus Labs, the leading Web3 security infrastructure provider, has unveiled a groundbreaking report highlighting...

Wireshark 4.2.4 Released: What’s New!

Wireshark stands as the undisputed leader, offering unparalleled tools for troubleshooting, analysis, development, and...

Zoom Unveils AI-Powered All-In-One AI Work Workplace

Zoom has taken a monumental leap forward by introducing Zoom Workplace, an all-encompassing AI-powered...

iPhone Users Beware! Darcula Phishing Service Attacking Via iMessage

Phishing allows hackers to exploit human vulnerabilities and trick users into revealing sensitive information...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Mitigating Vulnerability Types & 0-day Threats

Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

Related Articles