Hardware/Network
Zero-Day Flaw Affects BMW's ConnectedDrive Web Portal | SecurityWeek.Com
Reported by securityweek.com
The security bug, affecting the BMW ConnectedDrive online service web-application, is a VIN (Vehicle Identification Number) session vulnerability, security researcher Benjamin Kunz Mejri reveals. VIN, also known as chassis number, is a unique code used in the automotive industry to identify individual vehicles.