Security specialists recently unveiled loopholes in the Subaru system, affording them remote access to vehicle controls and tracking operations. As per a report by Wired, researchers Sam Curry and Shubham Shah detected these vulnerabilities, enabling them to hijack vehicle controls and access location data of drivers.
After the disclosure of their findings, Subaru rectified the vulnerabilities. However, the pair caution that discovering and mending these security loopholes in technologically advanced vehicles is merely a superficial solution to a more widespread problem.
The researchers invaded a test car via an employee-only web portal that extended permissions to remotely start the vehicle and also track its location in real time besides accessing an entire year’s worth of location data. According to Curry, this sensitive data can easily be manipulated in detrimental ways if accessible by the employees.
Curry and Shah warned of the industry-wide prevalence of these vulnerabilities, extending to other automakers as well, including brands such as Acura, Genesis, Honda, Hyundai, Infiniti, Kia, and Toyota.
Original source: Read the full article on TechCrunch
