Skip to main content

Nissan disables Leaf app following hacking scare

According to news reports, Nissan has disabled its NissanConnect EV app after it was found that hackers could remotely control in-car systems. Security researcher Troy Hunt discovered the vulnerability during a software workshop he was attending and has detailed his findings on his blog. In a test with fellow researcher Scott Helme, they found they were able to remotely turn on the car's heated seating, heated steering wheel, fans and air conditioning. According to Helmes, “Fortunately, the Nissan Le
February 26, 2016 Read time: 2 mins
According to news reports, 838 Nissan has disabled its NissanConnect EV app after it was found that hackers could remotely control in-car systems.

Security researcher Troy Hunt discovered the vulnerability during a software workshop he was attending and has detailed his findings on his blog. In a test with fellow researcher Scott Helme, they found they were able to remotely turn on the car's heated seating, heated steering wheel, fans and air conditioning.

According to Helmes, “Fortunately, the Nissan Leaf doesn't have features like remote unlock or remote start, like some vehicles from other manufacturers do, because that would be a disaster with what's been uncovered. Still, a malicious actor could cause a great deal of problems for owners of the Nissan Leaf. Being able to remotely turn on the AC for a car might not seem like a problem, but this could put a significant drain on the battery over a period of time as the attacker can keep activating it.”

Paul Fletcher, cyber security evangelist at Alert Logic, comments, “The Nissan Leaf vulnerability is an issue that needs to be fixed by the manufacturer and while this vulnerability doesn’t have the same impact as the Jeep vulnerabilities documented last year, it’s an entry point into the controls of a vehicle and the potential for a more severe hack is now present."

Related Content

  • January 25, 2012
    US state of the art workzone safety
    The Texas Transportation Institute's Jerry Ullman talks about the state of the art in work zone safety in the US. Work zones are places where, perhaps more than anywhere else on the road network, mobility and safety are strongly linked. Historically, field crews and contractors wanted vehicles in work zones to be moving as slowly as possible, assuming that made conditions the safest for work crews. We are though starting to see a shift in such thinking with the realisation that excessive delays or slow-down
  • January 26, 2012
    Increasing road safety with automated driver assistance systems
    Jon Masters looks at how drivers will be trained to use the increasing number of advanced driver assistance systems being incorporated into modern cars
  • August 8, 2018
    Knowing when to slow down
    Level 2 driver assistance vehicles have little problem reading fixed metal signs at the roadside - but it’s a different story with VMS in tunnels, finds Alan Dron. Following a series of hands-free driving tests in tunnels, an Australian road authority believes that car manufacturers have to up their game before vehicles have the required levels of competence to consistently perform ‘assisted driving’ tasks. The trials, in the state of Victoria late last year, tested the ability of several vehicles to stay
  • February 3, 2012
    Cooperative infrastructure systems waiting for the go ahead
    Despite much research and technological promise, progress towards cooperative infrastructure system deployment is still slow. Here, Robert Cone and John Miles take a considered look at how and when it might come about. From a systems engineering viewpoint it looks logical and inevitable that vehicles should be communicating between themselves and with the road infrastructure. But seen from a business viewpoint the case is not proven.