Immediately after the publication of the Australian computer security specialist Troy hunt data, that Nissan Leaf, the electric car of the Japanese concern, you can hack through their system of heating and air conditioning, the company turned off the mobile app NissanConnect EV (previously CarWings).
Mr. hunt reported risk that someone might control systems from the outside Leaf, by sending commands via the web browser, because the app has not been configured to identify the identity of the owner. Instead, it only required the vehicle identification number (VIN) marked on the windshield of the vehicle. He acknowledged that the problem is not life-threatening, but noted that hackers have the possibility of using vulnerabilities to harm, warming-up and cooling the interior, thus discharging the battery. In addition, the attacker gets access to the information about the time and range of movement, but without location. Mr. hunt suggested that it is enough to know when the owner left home, how far left and put the battery and Immobilise the car.
“In this regard, the NissanConnect app EV — previously called CarWings is currently unavailable”, — said the firm in a statement. “We apologize for the disappointment caused to our Nissan Leaf and eNV200 clients who have benefited from our mobile app. However, the most important thing is the quality and interrelation of our products. No other important elements of driving a Nissan Leaf or eNV200 is not affected, and drivers are 200,000-plus LEAF and eNV200 all over the world can continue to use their cars safely and with complete privacy”.
“We hope to issue updated versions of our apps very soon.”
On materials bbc