Overview
- The researchers compiled 413 documented automotive software vulnerabilities for 2022–2024, a dataset summarized in coverage this week that highlights where modern attack surfaces lie.
- Overall reported flaws have fallen since 2019, but the share found in smartphone apps, websites and cloud services has almost tripled compared with a decade earlier.
- Infotainment and telematics systems often act as bridges into sensitive in‑vehicle networks because they connect to external services and frequently include third‑party code from suppliers.
- Investigators found recurring web‑style weaknesses such as SQL injection, cross‑site scripting and misconfigured components like Grafana, which let attackers run database commands, execute scripts in users’ browsers, or access monitoring data.
- Researchers urge automakers to apply web and IT security practices by isolating vehicle‑control domains, enforcing stronger authorization checks, improving third‑party governance, and prompting users to use strong passwords and install updates.