Critical Vulnerabilities in Smart Bus Systems Expose Vehicles to Hacking Risks

TL;DR

• Researchers discovered critical vulnerabilities in smart bus systems that could allow hackers to remotely track, control, and spy on vehicles.
• These flaws, found in onboard and remote systems, pose significant security risks due to insecure components and lack of network segmentation.
• The vulnerabilities remain unpatched as the router manufacturer and related companies have not responded to the researchers’ findings.

Introduction

Researchers Chiao-Lin ‘Steven Meow’ Yu of Trend Micro Taiwan and Kai-Ching ‘Keniver’ Wang of CHT Security have uncovered significant vulnerabilities in smart bus systems. These flaws could allow hackers to remotely track, control, or spy on vehicles, exposing critical risks due to insecure onboard and remote components. The findings were presented at the DEF CON hacker conference, highlighting the urgent need for improved security measures in public transportation systems.

Research Findings

Discovery of Vulnerabilities

The researchers initially noticed the presence of free passenger Wi-Fi on smart buses, which led them to investigate further. They discovered that the same M2M router used for providing Wi-Fi also managed critical in-vehicle systems, including Advanced Public Transportation Services (APTS) and Advanced Driver Assistance Systems (ADAS).

Advanced Public Transportation Services (APTS)

APTS encompasses various functionalities such as:

• GPS tracking
• Passenger and operator interfaces
• Route scheduling
• Bus stop panels

All these features are centrally managed, making the shared network use a significant cyber risk.

Advanced Driver Assistance Systems (ADAS)

ADAS utilizes several technologies to enhance driver safety:

• Sensors
• Cameras
• Radar
• LiDAR

These systems provide collision warnings, lane departure alerts, speed and sign recognition, and monitor both the driver and passengers.

Exploitation and Risks

Bypassing Authentication

The researchers demonstrated how to bypass the router’s authentication, gaining access to both APTS and ADAS due to the lack of network segmentation. This vulnerability allows hackers to:

• Remotely target vulnerable buses
• Track vehicle locations
• Access cameras with weak passwords
• Alter display information
• Steal sensitive data
• Breach company servers

Potential Attacks

An attacker could manipulate critical data such as:

• GPS coordinates
• RPM readings
• Speed data

This manipulation can trigger false alerts and significantly impact the operations and safety of the bus system.

MQTT Backdoor

A detailed analysis revealed multiple vulnerabilities, including an MQTT backdoor that allows remote attackers to access the bus systems. This backdoor poses a severe threat as it can be exploited to gain unauthorized control over the vehicle’s critical functions.

Response and Current Status

The researchers contacted BEC Technologies, the router manufacturer, and Maxwin, a related company in Taiwan, but received no response. Consequently, the identified flaws remain unpatched, leaving the smart bus systems vulnerable to potential cyber-attacks.

Conclusion

The discovery of these vulnerabilities underscores the critical need for enhanced cybersecurity measures in smart bus systems. As public transportation increasingly relies on advanced technologies, ensuring the security and integrity of these systems is paramount to protect against potential threats and safeguard passenger safety.

Additional Resources

For further insights, check:

• ZDI Advisory on Smart Bus Vulnerabilities
• DEF CON Conference Talks
• SecurityWeek Article on Smart Bus Hacking

References