Smart Bus Smart Hacking: Free WiFi to Total Control
Demonstrates an attack chain starting from passenger public Wi-Fi to breach vehicular routers, hijack on-board units, and manipulate smart bus displays.
Summary
Connected Public Transit Architecture
Modern smart buses integrate On-Board Units (OBUs), passenger Wi-Fi routers, automated fare collection, and Advanced Public Transportation Services (APTS) communicating over internal vehicle networks.
From Passenger Wi-Fi to Vehicular Router Compromise
Kai Ching Wang and Chiao-Lin Yu demonstrate over ten vulnerabilities discovered across connected transit systems, showing how connecting to unsegmented passenger Wi-Fi allows attackers to exploit vehicular routers and access private internal subnets.
Hijacking ADAS, APTS, and Onboard Displays
Once inside the vehicular network, attackers can manipulate LED route displays, intercept passenger and driver telemetry, spoof GPS coordinates, and pivot to transport company backend API servers.
Policy and Supply Chain Recommendations
Addressing smart transit vulnerabilities requires enforcing strict network isolation between public Wi-Fi and vehicle telemetry, removing vendor backdoors, and updating public transit cybersecurity specifications.
Related talks
Auto Hacking Village·24 min
Ken Munro explains the exploitation of the Mitsubishi Outlander PHEV Wi-Fi module, demonstrating remote vehicle control and alarm tampering.
Creator Stage·19 min
Hyo Jin Lee · Hanryeol Park
Analyzes connected dash cams from global manufacturers, discovering shared OEM vulnerabilities, OS command injections, and custom protocol flaws.
IoT Village·37 min
Elvis Collado
This talk is about how an unauthenticated heap-based buffer overflow vulnerability was discovered and exploited within a router distributed by a market-leading ISP. Despite the targeted process utilizing mitigations s...