Honda key fob flaw lets hackers remotely unlock and start cars

Stability researchers have unveiled a vulnerability in Honda’s keyless entry procedure that could make it possible for hackers to remotely unlock and start possibly “all Honda vehicles presently existing on the market.”

The “Rolling-Pwn” assault, uncovered by Star-V Lab security researchers Kevin2600 and Wesley Li, exploits a vulnerability in the way Honda’s keyless entry program transmits authentication codes involving the motor vehicle and the critical fob. It works in a very similar way to the just lately found out Bluetooth replay attack affecting some Tesla vehicles working with simply purchasable radio products, the researchers were able to eavesdrop and seize the codes, then broadcast them back again to the car or truck in get to acquire access.

This authorized the scientists to remotely unlock and start out the engines of cars impacted by the vulnerability, which consists of designs from as much back as 2012 and as current as 2022. But in accordance to The Travel, which independently examined and verified the vulnerability on a Honda Accord 2021, the important fob flaw doesn’t enable an attacker to push off with the car.

As famous by the researchers, this form of assault need to be prevented by the vehicle’s rolling codes mechanism — a technique introduced to prevent replay attacks by providing a new code for each authentication of a remote keyless entry. Vehicles have a counter that checks the chronology of the created codes, raising the depend when it gets a new code.

Kevin2600 and Wesley Li identified that the counter in Honda vehicles is resynchronized when the car auto will get lock and unlock commands in a consecutive sequence, triggering the vehicle to acknowledge codes from prior classes that need to have been invalidated.

“By sending the commands in a consecutive sequence to the Honda motor vehicles, it will be resynchronizing the counter,” the researchers compose. “Once counter resynced, commands from the former cycle of the counter worked once again. For that reason, all those commands can be utilized later on to unlock the car at will.”

The scientists say they analyzed their assault on quite a few Honda versions, like the Honda Civic 2012, Honda Accord 2020, and Honda In shape 2022, but alert that the protection vulnerability could have an impact on “all Honda automobiles now existing on the industry” and could also have an impact on other manufacturers’ vehicles.

The stability researchers say they attempted to speak to Honda about the vulnerability but found that the enterprise “does not have a section to offer with stability-connected concerns for their products and solutions.” As these kinds of, they described the situation to Honda customer company but have not but acquired a reaction.

TechCrunch also did not obtain a reaction from Honda, but in a statement to The Push, the company insisted that the engineering in its essential fobs “would not allow for the vulnerability as represented in the report.”

“We have appeared into past similar allegations and identified them to absence substance,” a Honda spokesperson said. “Though we really do not but have enough data to establish if this report is credible, the key fobs in the referenced vehicles are geared up with rolling code technological innovation that would not let the vulnerability as represented in the report. In addition, the films made available as evidence of the absence of rolling code do not involve sufficient proof to guidance the claims.”

As pointed out by the safety scientists, if Honda was to acknowledge the flaw, correcting it would be hard because of to the point that older vehicles really do not assistance in excess of-the-air (OTA) updates. Worryingly, the researchers also warned there is no way to guard versus the hack and no way to ascertain if it occurred to you.

Connected video clip: