Security researchers found serious vulnerabilities in Skoda cars. They could allow remote hacking. The MIB3 infotainment system in the Skoda Superb III sedan has issues. It affects over 1.4 million vehicles worldwide. At Black Hat Europe, PC Automotive researchers revealed vulnerabilities in cars. These flaws could let hackers track them, access their GPS, and record in-car conversations.
The vulnerabilities require no authentication. You can trigger them via Bluetooth within a 10-meter range. They also expose personal data. For example, attackers could access the vehicle’s plaintext contact database. Phones are encrypted. The flaws do not let hackers control safety-critical functions, like brakes or steering. But they still pose a serious privacy and security risk.
Volkswagen, which owns Skoda, patched the reported vulnerabilities. The company’s cybersecurity disclosure program found them. Skoda assured customers. Their safety was never at risk. The vulnerabilities only affected non-critical systems. Experts warn that used cars with un-erased infotainment systems may be vulnerable.