|
Multiple BMW automobiles contain a flaw that may allow an attacker to access and start the vehicle without the key. This is due to two issues. First, the car's internal ultrasonic sensor system contains a flaw that allows an attacker to break the driver side window without tripping the alarm. Second, once an attacker is inside the car and has unrestricted access to the on-board diagnostic (OBD) they are able to request the car's unique key fob digital ID. Using commercially available hardware, the attacker can reprogram a blank key fob with the ID specific to the vehicle. Using the newly programmed key fob, an attacker can deny service to the owner by boosting his ride. =(
|