Syrus4 IoT Gateway Vulnerability Could Allow Code Execution on Thousands of Vehicles, Simultaneously (CVE-2023-6248)

A significant vulnerability affecting Syrus4 IoT Gateway has emerged, posing a serious threat to the worldwide automotive industry. This vulnerability, capable of giving hackers control over a fleet of vehicles and potentially shutting them down, has been left unattended by the vendor for an extended period.

Despite the gravity of the situation, the vendor, Digital Communications Technologies (DCT), has yet to tackle the identified vulnerability, leaving an open window for malicious actors to exploit and disrupt vehicles. The extent of …

automotive automotive industry code code execution control cve down fleet gateway hackers industry iot period serious threat vehicles vendor vulnerability