The client wanted to introduce a new connected vehicle in the market with a host of new-age features and achieve faster time-to-market. They intended to do a complete penetration testing of the vehicle, identify, and mitigate security vulnerabilities before the launch of the vehicle.
The client partnered with L&T Technology Services to Conduct Penetration testing and security assessment of next-gen connected vehicles such as
- In-Vehicle Infotainment (IVI), Key Fob, and Telematics
- Connected car platform and mobile applications
Business Value Delivered:
- Identified a total of 48 vulnerabilities, with 1 critical and 16 highly critical vulnerabilities
- Successful exploitation of USB interface to manipulate the infotainment unit through a custom script for simulating the attack
- Simulated attack for vehicle theft by capturing & replaying signals from the key fob
- Successful fuzzing attack through OBD interface with a custom Python script to disable the electronic steering lock permanently