{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,16]],"date-time":"2026-09-16T18:57:22Z","timestamp":1789585042110,"version":"build-2803163510"},"reference-count":31,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2024,5,8]],"date-time":"2024-05-08T00:00:00Z","timestamp":1715126400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2024,5,8]],"date-time":"2024-05-08T00:00:00Z","timestamp":1715126400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Consiglio Nazionale Delle Ricerche"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Comput Virol Hack Tech"],"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>\n                    In the last years, the increasing vehicular technology has led to a surge in cybersecurity attacks, particularly regarding connected vehicles and their vulnerable infotainment systems. This paper explores the vulnerabilities within an In-Vehicle Infotainment (IVI) system firmware, focusing on the\n                    <jats:italic>Gen5W_L<\/jats:italic>\n                    multimedia device utilized in Hyundai, Kia, and Genesis vehicles. Leveraging reverse engineering techniques, the study uncovers several security issues within the firmware, allowing for the creation and installation of custom firmware. The paper introduces Chimaera, a reverse engineering attack targeting the IVI system firmware, which exploits a  vulnerability introduced by statically compiling the mbedtls library. After a reverse engineering analysis and injecting malicious assembly code directly in the IVI firmware, the attack enables the extraction of sensitive information from the firmware files like the cryptographic keys to install a customized firmware. The research shows that exploiting these vulnerabilities facilitates the installation of insecure firmware, granting attackers unauthorized access to vehicle functionalities. This includes the possibility to inject CAN bus messages, potentially compromising critical vehicle systems such as radio controls and safety features. The findings underscore the need for robust cybersecurity measures within automotive systems and highlight the significance of vulnerability assessment to mitigate security risks in connected vehicles.\n                  <\/jats:p>","DOI":"10.1007\/s11416-024-00522-4","type":"journal-article","created":{"date-parts":[[2024,5,8]],"date-time":"2024-05-08T15:01:30Z","timestamp":1715180490000},"page":"681-696","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":12,"title":["A vehicle firmware security vulnerability: an IVI exploitation"],"prefix":"10.1007","volume":"20","author":[{"given":"Gianpiero","family":"Costantino","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2706-2936","authenticated-orcid":false,"given":"Marco","family":"De Vincenzi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ilaria","family":"Matteucci","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,5,8]]},"reference":[{"key":"522_CR1","unstructured":"Cybersecurity, a growing threat for the automotive industry, https:\/\/www.just-auto.com\/interview\/cybersecurity-a-growing-threat-for-the-automotive-industry\/. Accessed 18 March 2024"},{"key":"522_CR2","doi-asserted-by":"publisher","unstructured":"Koscher, K., Czeskis, A., Roesner, F., Patel, S., Kohno, T., Checkoway, S., McCoy, D., Kantor, B., Anderson, D., Shacham, H., Savage, S.: Experimental security analysis of a modern automobile. In: 2010 IEEE Symposium on Security and Privacy (SP), pp. 447\u2013462. IEEE Computer Society, Los Alamitos (2010). https:\/\/doi.org\/10.1109\/SP.2010.34","DOI":"10.1109\/SP.2010.34"},{"key":"522_CR3","unstructured":"Checkoway, S., McCoy, D., Kantor, B., Anderson, D., Shacham, H., Savage, S., Koscher, K., Czeskis, A., Roesner, F., Kohno, T.: Comprehensive experimental analyses of automotive attack surfaces. In: Proceedings of the 20th USENIX Conference on Security, p.\u00a06. SEC\u201911, USENIX Association (2011)"},{"key":"522_CR4","unstructured":"Charlie, M., Chris, V.: Remote exploitation of an unaltered passenger vehicle (08 2015), https:\/\/illmatics.com\/Remote%20Car%20Hacking.pdf. Accessed 18 March 2024"},{"key":"522_CR5","unstructured":"Cai, Z., Wang, A., Zhang, W.K.: 1-0-days & mitigations: roadways to exploit and secure connected bmw cars (2019). https:\/\/i.blackhat.com\/USA-19\/Thursday\/us-19-Cai-0-Days-And-Mitiations-Roadways-To-Exploit-And-Secure-Connected-BMW-Cars-wp.pdf. Accessed 18 March 2024"},{"key":"522_CR6","unstructured":"Secure research report on mercedes benz. https:\/\/i.blackhat.com\/USA-20\/Thursday\/us-20-Yan-Security-Research-On-Mercedes-Benz-From-Hardware-To-Car-Control-wp.pdf. Accessed 18 March 2024"},{"key":"522_CR7","unstructured":"Tesla model 3 interface is vulnerable to dos attacks. https:\/\/gridinsoft.com\/blogs\/is-researcher-found-that-the-tesla-model-3-interface-is-vulnerable-to-dos-attacks\/. Accessed 18 March 2024"},{"key":"522_CR8","unstructured":"UNECE: Uniform provisions concerning the approval of vehicles with regards to cyber security and cyber security management system. Regulation Addendum 154\u2014UN Regulation No. 155, United Nations Economic Commission for Europe, Geneva, CH (2021). https:\/\/unece.org\/sites\/default\/files\/2021-03\/R155e.pdf"},{"key":"522_CR9","unstructured":"ISO: Road vehicles\u2014cybersecurity engineering. Standard ISO\/SAE FDIS 21434:2021 Ed.1, International Organization for Standardization, Geneva, CH (2021). https:\/\/www.iso.org\/standard\/70918.html"},{"key":"522_CR10","unstructured":"Gen 5.0 multimedia update. https:\/\/menaco.co\/gen5-multimedia. Accessed 18 March 2024"},{"key":"522_CR11","unstructured":"Paganini, P.: How to hack airbag in Audi TT on other models (25\/10\/2015). https:\/\/securityaffairs.co\/wordpress\/41416\/hacking\/hack-airbag-audi-tt.html. Accessed 18 March 2024"},{"key":"522_CR12","unstructured":"Zetter, K.: Researchers hacked a model S, but Tesla\u2019s already released a patch (06\/08\/2015). https:\/\/www.wired.com\/2015\/08\/researchers-hacked-model-s-teslas-already\/. Accessed 18 March 2024"},{"key":"522_CR13","unstructured":"Solomon, O.: Team of hackers take remote control of Tesla Model S from 12 miles away (20\/09\/2016). https:\/\/www.theguardian.com\/technology\/2016\/sep\/20\/tesla-model-s-chinese-hack-remote-control-brakes. Accessed 18 March 2024"},{"key":"522_CR14","unstructured":"Paganini, P.: Flaws in BMW ConnectedDrive Infotainment System allow remote hack (2016). https:\/\/securityaffairs.com\/49149\/hacking\/bmw-connecteddrive-hacking.html. Accessed 18 March 2024"},{"key":"522_CR15","unstructured":"Mitsubishi Outlander hybrid car alarm \u2018hacked\u2019 (2016). https:\/\/www.bbc.com\/news\/technology-36444586. Accessed 18 March 2024"},{"key":"522_CR16","unstructured":"Nissan Leaf Can be Hacked via Mobile App and Web Browser (2016). https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/internet-of-things\/nissan-leaf-can-be-hacked-via-mobile-app-and-web-browser. Accessed 18 March 2024"},{"key":"522_CR17","unstructured":"A Remote Attack on the Bosch Drivelog Connector Dongle (2017). https:\/\/argus-sec.com\/blog\/cyber-security-blog\/remote-attack-bosch-drivelog-connector-dongle\/. Accessed 18 March 2024"},{"key":"522_CR18","unstructured":"Keenlab Security Lab: new car hacking research: 2017, remote attack tesla motors again (2017). https:\/\/keenlab.tencent.com\/en\/2017\/07\/27\/New-Car-Hacking-Research-2017-Remote-Attack-Tesla-Motors-Again\/. Accessed 18 March 2024"},{"key":"522_CR19","doi-asserted-by":"publisher","unstructured":"Costantino, G., Marra, A.L., Martinelli, F., Matteucci, I.: CANDY: a social engineering attack to leak information from infotainment system. In: 87th IEEE Vehicular Technology Conference, VTC Spring 2018, Porto, Portugal, 2018, pp. 1\u20135. IEEE (2018). https:\/\/doi.org\/10.1109\/VTCSpring.2018.8417879","DOI":"10.1109\/VTCSpring.2018.8417879"},{"key":"522_CR20","unstructured":"Tencent Keen Security Lab: New Vehicle Security Research by KeenLab: Experimental Security Assessment of BMW Cars (2018). https:\/\/keenlab.tencent.com\/en\/whitepapers\/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf. Acces-sed 18 March 2024"},{"key":"522_CR21","unstructured":"Subaruoutback: Hacking the Starlink Infotainment System. https:\/\/www.subaruoutback.org\/threads\/hacking-the-starlink-infotainment-system.494535\/?dpost_id=5647763 &nested_view=1 &sortby=oldest#post-5647763. Accessed 18 March 2024"},{"key":"522_CR22","unstructured":"Volkswagen and Audi car infotainment systems hacked remotely (2018). https:\/\/nakedsecurity.sophos.com\/2018\/05\/02\/volkswagen-and-audi-car-infotainment-systems-hacked-remotely. Accessed 18 March 2024"},{"key":"522_CR23","unstructured":"Hackers Can Steal a Tesla Model S in Seconds by Cloning Its Key Fob (2018). https:\/\/www.wired.com\/story\/hackers-steal-tesla-model-s-seconds-key-fob\/. Accessed 18 March 2024"},{"key":"522_CR24","doi-asserted-by":"publisher","unstructured":"Costantino, G., Matteucci, I.: CANDY CREAM - hacking infotainment android systems to command instrument cluster via can data frame. In: Qiu, M. (ed.) 2019 IEEE International Conference on Computational Science and Engineering, CSE 2019, and IEEE International Conference on Embedded and Ubiquitous Computing, EUC 2019, New York, 2019, pp. 476\u2013481. IEEE (2019). https:\/\/doi.org\/10.1109\/CSE\/EUC.2019.00094","DOI":"10.1109\/CSE\/EUC.2019.00094"},{"key":"522_CR25","unstructured":"Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars (2020). https:\/\/keenlab.tencent.com\/en\/2020\/03\/30\/Tencent-Keen-Security-Lab-Experimental-Security-Assessment-on-Lexus-Cars\/. Accessed 18 March 2024"},{"key":"522_CR26","unstructured":"Tesla Hacked and Stolen Again Using Key Fob (2020). https:\/\/threatpost.com\/tesla-hacked-stolen-key-fob\/161530. Accessed 18 March 2024"},{"key":"522_CR27","unstructured":"Weinmann, R.P., Schmotzle, B.: TBONE\u2014a zero-click exploit for Tesla MCUs (2021). https:\/\/kunnamon.io\/tbone\/tbone-v1.0-redacted.pdf"},{"key":"522_CR28","unstructured":"Berard, D., Dehors, V.: Pwn2own Vancouver 2022\u2014the results. https:\/\/www.zerodayinitiative.com\/blog\/2022\/5\/18\/pwn2own-vancouver-2022-the-results"},{"key":"522_CR29","unstructured":"Autoblog: Researchers use fake charging station wifi to hack into and steal your tesla, https:\/\/www.autoblog.com\/2024\/03\/10\/researchers-use-fake-charging-station-wifi-to-hack-into-and-steal-your-tesla\/. Accessed 18 March 2024"},{"key":"522_CR30","unstructured":"Ghidra, https:\/\/ghidra-sre.org\/. Accessed 18 March 2024"},{"key":"522_CR31","unstructured":"MbedTLS, https:\/\/github.com\/Mbed-TLS\/mbedtls. Accessed 18 March 2024"}],"container-title":["Journal of Computer Virology and Hacking Techniques"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-024-00522-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11416-024-00522-4\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-024-00522-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,15]],"date-time":"2024-10-15T11:08:53Z","timestamp":1728990533000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11416-024-00522-4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,8]]},"references-count":31,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2024,11]]}},"alternative-id":["522"],"URL":"https:\/\/doi.org\/10.1007\/s11416-024-00522-4","relation":{},"ISSN":["2263-8733"],"issn-type":[{"value":"2263-8733","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,5,8]]},"assertion":[{"value":"28 December 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 April 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 May 2024","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}