Renault Navigation Software Allows Root Code Execution via Path Traversal
Original title: Renault Car’s 15-Year-Old Linux Navigation Software Hacked to Execute Arbitrary Root Commands
2014 Renault Latitude TomTom head unit vulnerable to root compromise through malicious SD card using old Linux kernel.
Researcher Rasmus Moorats found that inserting a malicious SD card into the TomTom Carminat LIVE navigation system in a 2014 Renault Latitude can lead to root code execution. The unit runs a custom Linux 2.6.28.10 OS on Samsung S5P6440 hardware. Flaws in the ttn parser allow path traversal for file writes and unargumented program execution, combined with a kernel core_pattern exploit to run arbitrary scripts after user confirmation of the master.script prompt.
- Exploit chain requires physical access and script approval prompt.
- Kernel core_pattern trick bypasses noexec protections.
- Allows backup of eMMC storage and timezone changes.
- No updates available for this 15-year-old system.
Impact: root code execution on car navigation unit
- Vendors
- Renault
From the original article
4 min read at cybersecuritynews.com
A security researcher has found a way to run any command with root rights on the navigation unit in a 2014 Renault Latitude. The unit is a TomTom Carminat LIVE head unit that runs a custom system built on Linux 2. 6.
By Tushar Subhra Dutta · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.