BMW Telematics security vulnerabilities discovered

[dparm]

https://nakedsecurity.sophos.com/201...ecurity-patch/


The vulnerabilities are in in the Telematics Control Unit (TCB), the Central Gateway Module, and Head Unit, across a range of interfaces including via GSM, BMW Remote Service, BMW ConnectedDrive, Remote Diagnosis, NGTP, Bluetooth, and the USB/OBD-II interfaces.

Some require local access (e.g. via USB) to exploit but six including the Bluetooth flaw were accessible remotely, making them the most serious.



It sounds like this may impact some later E9x M3s -- so check the BMW site for software updates in the coming weeks.

[drwankel]

This is disturbing. I wish there was more concrete info about exactly what is affected.

[Bartledoo]

So stripper models are safe? should help stripper resale value...