Ford reports Vulnerability in WiFI SYNC 3, cars vulnerable while engine is running
Take action: Not a critical advisory, but a sign of times to come: We will be reading and reacting to cybersecurity vulnerabilities in even more parts of our life, even the vehicles we travel in.
Learn More
A security vulnerability has been identified in the Wi-Fi driver utilized in the SYNC3 infotainment system by Ford. This vulnerability could potentially enable an attacker to exploit a buffer overflow if they are in close proximity to the vehicle.
This issue is tracked as CVE-2023-29468. The root of the vulnerability, lies within the Texas Instrument WiFi Link WL18xx MCP driver. An individual with malicious intent could craft a specially designed data frame to initiate a buffer overflow, opening the door for a remote code execution attack.
Although this vulnerability raises concerns among Ford's customer base that utilizes vehicles equipped with SYNC 3, Ford clarifies that as of now, there have been no known instances of this vulnerability being exploited.
The risk of the vulnerability is deemed as low since successful exploitation requires the attacker to be physically near the exposed vehicle. The attack's success also hinges on the vehicle's engine being active and the Wi-Fi support being enabled. So, in practical terms, the attackers need to drive next to you for an extended period of time to execute the hack.
On top of the mechanical impediments to the attack, it's complexity demands a high level of expertise, effectively limiting the potential culprits to experienced hackers. Ford is confident that the prerequisites for exploitation, including the need for proximity and an active engine, make the occurrence unlikely.
In case of successful exploit, Ford claims that the impact would be minimal. The infotainment system is isolated from critical vehicular controls such as steering, braking, and acceleration. This isolation means that even if compromised, the safety of the vehicle's occupants would remain unaffected.
To address this vulnerability, Ford is working on developing a patch.
In the interim, Ford has identified a simple protective measure - disabling the Wi-Fi support within the SYNC 3 infotainment system. With this, the vulnerability can effectively be thwarted. This precaution is significant as it eliminates one of the key prerequisites for an attacker to launch an assault on the system.
This vulnerability is present across all Ford and Lincoln models equipped with the SYNC 3 system that have been produced, including vehicles like the 2021 and 2022 Mustang, the 2021 and 2022 Bronco Sport, and the 2021 Expedition. Ford urges its customers to verify the version of their SYNC system to confirm whether their vehicles are susceptible to this particular security threat.
