writeups.xyz / Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More

Submitter : c2a

Date: 3 January 2023

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• SSO
• RCE
• Authorization Bypass
• SQL Injection
• Mass Assignment
• Information Disclosure

Programs :

• Kia
• Honda
• Infiniti
• Nissan
• Acura
• Mercedes-Benz
• Hyundai
• Genesis
• BMW
• Rolls Royce
• Ferrari
• Spireon
• Ford
• Reviver
• Porsche
• Toyota
• Jaguar
• Land Rover
• SiriusXM

Authors :

• Sam Curry (@Samwcyo)
• Neiko Rivera (@_Specters)
• Brett Buerhaus (@Bbuerhaus)
• Maik Robert (@XEHLE_)
• Ian Carroll (@Iangcarroll)
• Justin Rhinehart (@Sshell_)
• Shubham Shah (@Infosec_au)

Link :
https://samcurry.net/web-hackers-vs-the-auto-industry/