G-8VXWWTRHPN VW Golf hacked, VAG CAN bus vulnerability - VWWatercooled Australia

Announcement

Collapse
1 of 2 < >

Email Notifications Failing (mostly Telstra)

Hello everyone. Seems there is an issue with Telstra (possible others) blocking email from our server. If you are trying to sign up I would suggest a different email if possible. If you're trying to reset your password and it fails please use the Contact Us page:
Contact Us - VWWatercooled Australia
https://www.vwwatercooled.com/contact-us
Contact Us
2 of 2 < >

Welcome to the new look VWWatercooled

After much work and little sleep there is a new version of the forums running on more powerful and recent hardware as well as an upgraded software platform.

Things are mostly the same, but some things are a little different. We will be learning together, so please post questions (and answers if you've worked things out) in the help thread.

New Forum Server and Software - VWWatercooled Australia
https://www.vwwatercooled.com/forum/first-stop/forum-rules-how-to-post/2037513-new-forum-server-and-software
The new forum software is an upgraded version of what came before, it's mostly the same but also a little different. Hopefully easier to use and more stable than before. We are learning together here, so please be patient. If you have questions, please post them here. If you have worked something out and can provide an answer,
See more
See less

VW Golf hacked, VAG CAN bus vulnerability

Collapse
X
Collapse
 
  • Page of 1
  • Filter
  • Time
  • Show
Clear All
new posts
Previous template Next
  • #1

    VW Golf hacked, VAG CAN bus vulnerability

    Details of the hack and disclosure set out nicely in this paper.
    404
    https://www.computest.nl/wp-content/uploads/2018/04/connected-car-rapport.pdf

    Looks like this vulnerability effects all VAG MIB equipped cars built before week 22 of 2017.
    (The VAG letter says week 22 of 2016, but given the timeline of research and disclosure, must be 2017.)
    Current : 2017 Mk7 Golf R (most options) || 2012 Golf Mk6 TDi (few options)
    Gone : 2004 Bora V6 4Motion (few klms, all options)

    ><(((°> ><(((°>
    Tags: disclosure, letter, vag, vulnerability, week
  • #2
    Thanks for sharing.

    In summary:

    If your car has a SIM internet connection it is likely vulnerable to an exploit which the attacker can use to gain some limited access.

    Recommendation is to remove the SIM.

    This same exploit can be had via WiFi or a connected phone via USB.

    Only connect your car to a trusted network. The phone SIM network is not trusted.

    Only connect a trusted device to your car.
    Arteon & T-Roc

    Comment

    Previous template Next

    2025 - Below Forum

    Collapse

    Test Slow

    Collapse
    Working...
    X