Hacking Kia: Remotely Controlling Cars With Just a License Plate

Introduction 介绍

On June 11th, 2024, we discovered a set of vulnerabilities in Kia vehicles that allowed remote control over key functions using only a license plate. These attacks could be executed remotely on any hardware-equipped vehicle in about 30 seconds, regardless of whether it had an active Kia Connect subscription.
2024 年 6 月 11 日，我们在起亚车辆中发现了一组漏洞，仅使用车牌即可远程控制关键功能。这些攻击可以在大约 30 秒内在任何配备硬件的车辆上远程执行，无论该车辆是否拥有有效的 Kia Connect 订阅。

Additionally, an attacker could silently obtain personal information, including the victim’s name, phone number, email address, and physical address. This would allow the attacker to add themselves as an invisible second user on the victim’s vehicle without their knowledge.
此外，攻击者还可以悄悄获取个人信息，包括受害者的姓名、电话号码、电子邮件地址和实际地址。这将允许攻击者在受害者不知情的情况下将自己添加为受害者车辆上的隐形第二用户。

We built a tool to demonstrate the impact of these vulnerabilities where an attacker could simply (1) enter the license plate of a Kia vehicle, then (2) execute commands on the vehicle after around 30 seconds. These vulnerabilities have since been fixed, this tool was never released, and the Kia team has validated this was never exploited maliciously.
我们构建了一个工具来演示这些漏洞的影响，攻击者可以简单地 (1) 输入起亚汽车的车牌，然后 (2) 大约 30 秒后在车辆上执行命令。这些漏洞已被修复，该工具从未发布，起亚团队已验证该工具从未被恶意利用。

Vehicles Affected 受影响的车辆