Tesla hack: IT expert could remotely control functions

Software in passenger cars will always be vulnerable – especially when it comes from third-party providers. At least that’s what the 19-year-old IT security specialist David Colombo from Germany claims: According to a tweet, he managed to access features of more than 25 Tesla models in 13 countries remotely, although he couldn’t hack the driving functions. The news service Bloomberg reported that Colombo also provided evidence for his claims upon request. He presented screenshots of a private chat with a Tesla owner whose vehicle he claimed to be able to control, including the horn. With other models, he was able to unlock doors and windows, turn on headlights and the sound system, and even start some cars. He could also determine whether a driver was on board or not.

Colombo asked Bloomberg not to publish details about the third-party software manufacturer since the security flaws had not been fixed at the time of the tweet. He had informed Tesla and the operator of the insecure software about the issue – a potential danger could be if loud music suddenly played unprepared or if the headlights were turned off at night.

Colombo's tweet can be found at: https://twitter.com/david_colombo_/status/1480852016045903873

Nevertheless I now can remotely run commands on 25+ Tesla‘s in 13 countries without the owners knowledge.

Regarding what I‘m able to do with these Tesla‘s now.
This includes disabling Sentry Mode, opening the doors/windows and even starting Keyless Driving.

[2/X]

— David Colombo (@david_colombo_) January 11, 2022

What does it mean?

There will probably always be cases where IT specialists can hack into vehicles. The entry point is not necessarily the vehicle itself but apps or third-party add-on programs that were installed later. Although Colombo couldn’t drive the vehicles, he could start them.