Log4j Vulnerabilities in Connected Cars and Charging Stations（聯網汽車和充電站中的 Log4j 漏洞）

2021年12月23日

在 Sébastien Dudek 的報告研究了攻擊者在汽車領域利用 Log4j 漏洞的可能性，特別是存取汽車上使用的設備和車載充電器。

VicOne 解決方案

xNexus
xZETA

UN R155 參考資料

4.3.1 Threats regarding back-end servers related to vehicles in the field
4.3.2 Threats to vehicles regarding their communication channels
4.3.3 Threats to vehicles regarding their update procedures
4.3.5 Threats to vehicles regarding their external connectivity and connections
4.3.6 Threats to vehicle data/code
4.3.7 Potential vulnerabilities that could be exploited if not sufficiently protected or hardened