-
-
[原创] 车机安全研究 -- Braktooth 拒绝服务攻击
-
发表于: 2023-4-10 20:42 12352
-
近日星舆实验室的安全研究人员发现近 10 款汽车的车机系统受 Braktooth 拒绝服务攻击影响。 研究发现每款汽车受漏洞影响的表象都有所不同, 具体细节请参考以下视频 DEMO。 同时星舆实验室已按照漏洞披露原则上报给厂商及工信部。
1) (尼桑日产)
表象: 蓝牙连接中断。 车机死机, 按键无反应。
DEMO: d9eK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2&6L8%4g2@1N6h3u0W2i4K6u0W2j5$3!0E0i4K6u0r3N6$3q4@1j5$3S2Q4x3@1k6$3i4K6y4p5x3e0q4*7k6Y4W2G2j5e0V1H3L8e0b7`.
2) (哪吒汽车)
表象: 蓝牙播放音乐卡顿, 最终蓝牙连接中断。
3) (TESLA-MODEL3)
表象: 蓝牙播放音乐卡顿, 攻击停止即恢复正常
DEMO: 103K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2&6L8%4g2@1N6h3u0W2i4K6u0W2j5$3!0E0i4K6u0r3N6$3q4@1j5$3S2Q4x3@1k6$3i4K6y4p5z5r3I4t1L8h3Z5$3d9K6f1#2j5i4M7`.
4) (TESLA-MODELX)
表象: 蓝牙播放音乐卡顿, 攻击停止即恢复正常
DEMO: ce9K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2&6L8%4g2@1N6h3u0W2i4K6u0W2j5$3!0E0i4K6u0r3N6$3q4@1j5$3S2Q4x3@1k6$3i4K6y4p5M7W2m8n7y4g2k6v1x3K6y4g2K9#2p5`.
5) (极狐ARCFOX-aS)
表象: 蓝牙播放音乐卡顿, 攻击停止即恢复正常
DEMO: 378K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2&6L8%4g2@1N6h3u0W2i4K6u0W2j5$3!0E0i4K6u0r3N6$3q4@1j5$3S2Q4x3@1k6$3i4K6y4p5g2p5q4m8h3p5u0g2d9$3N6i4x3@1f1`.
6) (极狐ARCFOX-aS-HI)
表象: 蓝牙播放音乐卡顿, 攻击停止即恢复正常
DEMO: dddK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2&6L8%4g2@1N6h3u0W2i4K6u0W2j5$3!0E0i4K6u0r3N6$3q4@1j5$3S2Q4x3@1k6$3i4K6y4p5P5s2c8V1h3W2l9#2h3Y4g2s2j5V1V1`.
7) (零跑C01)
表象: 蓝牙播放音乐卡顿, 最终蓝牙连接中断。
DEMO: 868K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2&6L8%4g2@1N6h3u0W2i4K6u0W2j5$3!0E0i4K6u0r3N6$3q4@1j5$3S2Q4x3@1k6$3i4K6y4p5e0o6c8F1f1%4W2p5d9q4k6c8k6s2x3`.
8) (蔚来ET5)
表象: 蓝牙连接中断。
DEMO: 775K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2&6L8%4g2@1N6h3u0W2i4K6u0W2j5$3!0E0i4K6u0r3N6$3q4@1j5$3S2Q4x3@1k6$3i4K6y4p5k6V1u0c8c8h3u0o6y4p5y4A6x3#2V1`.
9) (大众ID4X)
表象: 蓝牙连接中断。
DEMO: befK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2&6L8%4g2@1N6h3u0W2i4K6u0W2j5$3!0E0i4K6u0r3N6$3q4@1j5$3S2Q4x3@1k6$3i4K6y4p5c8f1I4E0k6q4p5#2f1Y4N6f1M7h3)9`.
10) (长安UNI-T)
表象: 蓝牙连接中断。 车机出现假死现象。
DEMO: a53K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2&6L8%4g2@1N6h3u0W2i4K6u0W2j5$3!0E0i4K6u0r3N6$3q4@1j5$3S2Q4x3@1k6$3i4K6y4p5k6$3k6s2d9@1H3&6k6V1E0a6x3o6R3`.