Security Advisories
Automotive security vulnerability disclosures by ASRG researchers. Referenced by NVD, MITRE, and security databases worldwide.
Suzuki Swift (2024): rolling-code keyless entry defeated by RollBack-style replay, enabling unauthorized lock/unlock
Affected: Suzuki Motor Corporation — Suzuki Swift, 2024 model year (observed on the SWIFT ISG GLS trim); Remote Keyless Entry System (RKES) rolling-code key fob, FCC ID CWTR53R0.
Indian Scout 2025: Infotainment skips PIN entry when WCM is silent at boot
Affected: Indian Motorcycle (Polaris Inc.) Scout Bobber + Tech, 2025 model year — Infotainment / Digital Round
Indian Scout 2025: Immobilizer state machine desynchronization denies engine start
Affected: Indian Motorcycle (Polaris Inc.) Scout Bobber + Tech, 2025 model year — Wireless Control Module (WCM), Engine Control Module (ECM)
Indian Scout 2025: CAN bus-off attack silently bypasses anti-theft shutdown
Affected: Indian Motorcycle (Polaris Inc.) Scout Bobber + Tech, 2025 model year — Wireless Control Module (WCM)
Indian Scout 2025: WCM voltage-based shutdown bypassable via wiring interruption
Affected: Indian Motorcycle (Polaris Inc.) Scout Bobber + Tech, 2025 model year — Wireless Control Module (WCM), Vehicle Control Module (VCM)
Indian Scout 2025: WCM brute-force lockout abused for persistent denial-of-service
Affected: Indian Motorcycle (Polaris Inc.) Scout Bobber + Tech, 2025 model year — Wireless Control Module (WCM)
Indian Scout 2025: Infotainment-to-WCM weak authentication allows PIN recovery
Affected: Indian Motorcycle (Polaris Inc.) Scout Bobber + Tech, 2025 model year — Wireless Control Module (WCM), Infotainment / Digital Round
Indian Scout 2025: WCM-to-ECM weak authentication enables immobilizer bypass
Affected: Indian Motorcycle (Polaris Inc.) Scout Bobber + Tech, 2025 model year — Wireless Control Module (WCM), Engine Control Module (ECM)
Micca KE700 Brute-force vulnerability due to low entropy
Affected: Micca Auto Electronics Co., Ltd., Car Alarm System KE700
Micca KE700 Acceptance of previously used rolling codes
Affected: Micca Auto Electronics Co., Ltd., Car Alarm System KE700
Micca KE700 Cleartext transmission of key fob ID
Affected: Micca Auto Electronics Co., Ltd., Car Alarm System KE700
BYD DiLink OS Insecure credential storage due to hard-coded cryptographic key
Affected: BYD's DiLink 3.0 OS
Vulnerabilities in Volkswagen MIB3 Infotainment (Part 2)
Affected: VW MIB3
Tesla Model 3 Physical CAN Bus Injection
Affected: Tesla Model 3
Autoeastern Smart Keyless Entry System Replay Attack
Affected: Autoeastern Cyclone Matrix TRF
KIA-branded Aftermarket Generic Smart Keyless Entry System Replay Attack
Affected: KIA-branded Aftermarket Generic Smart Keyless Entry System
Use of default credentials at Traccar fleet management solution
Affected: Traccar Server 2.12 – 6.0
Buffer overflow in Rensas RCAR
Affected: Rensas RCAR
Buffer Overflow Arbitrary Write in Rensas RCAR
Affected: Rensas RCAR
Incorrect Address Range Calculations in Renesas RCAR
Affected: Renesas rcar_gen3_v2.5
Integer Underflow in Memory Range Check in Renesas RCAR
Affected: Renesas rcar_gen3_v2.5
Vulnerability in ID Charger Connect and Pro from Volkswagen Group Charging GmbH – Elli, EVBox versions SPR3.2B, SPR3.51 and SPR3.52
Affected: ID Charger Connect & Pro
FIP Header Integer Overflow
Affected: Rensas rcar_gen3_v2.5
Trip Data Disclosure from Backend
Affected: Skoda Connect
Nickname Disclosure on the Backend Automotive Server
Affected: Skoda Connect
Denial of Service via ECU reset service
Affected: Superb III
Head Unit Denial-of-Service via Apple CarPlay service
Affected: MIB3 Infotainment Unit
Hard-coded password for UDS services
Affected: MIB3 Infotainment Unit
Weak encoding for password in UDS services
Affected: MIB3 Infotainment Unit
Hard-coded password for access to power controller chip memory
Affected: MIB3 Infotainment Unit
Improper Backend Communications Allow Access And Manipulation Of The Telemetry Data
Affected: Hangzhou Hopechart IoT Technology Co., Ltd., HQT401
Vault Key Partially Predetermined
Affected: EVE OS
SSH as Root Unlockable Without Triggering Measured Boot
Affected: EVE OS
Freely Allocate Buffer on The Stack With Data From Socket
Affected: EVE OS
Debug Functions Unlockable Without Triggering Measured Boot
Affected: EVE OS
Config Partition Not Protected by Measured Boot
Affected: EVE OS
Vault Key Sealed With SHA1 PCRs
Affected: EVE OS
Rootfs Not Protected
Affected: EVE OS
Config Partition Not Measured From 2 Fronts
Affected: EVE OS