Ford exposed Wi-Fi vulnerability in its own car engine system Sync 3, and hackers could invade and erase system data.

CTOnews.com, August 16, Ford issued a notice on August 10 that researchers have found Wi-Fi vulnerabilities in Sync3 machines used in some Ford models from 2021 to 2022, allowing hackers to invade and erase system data.

▲ source Ford official website incident report CTOnews.com learned after inquiry that the WL18xx MCP driver used in Ford series models has a memory buffer overflow vulnerability CVE-2023-29468. If hackers are in the range of Wi-Fi models, hackers can invade the machine by virtue of the loophole in the MCP driver, thus erasing the data of the engine system.

▲ source-related loophole report Ford said that so far has not been found that the loophole has been exploited by hackers, and hackers want to exploit the loophole, must be in the vehicle engine start, the engine turned on Wi-Fi, can launch attacks in the vicinity of the vehicle, and because the car throttle and transmission system is protected by the built-in firewall, even if the car machine is attacked, it will not affect the driving safety of car owners.

Ford also said it was working on a patch to fix the vulnerability, which could be mitigated by turning off the Wi-Fi function in the car before the patch was launched.