Filtered by tag: connected vehicles × Clear
Tata Motors iRA App Flaws Could Let Hackers Impersonate Car Owners and Access Vehicle Services
Matched: health
India's CERT-In has flagged four high-severity flaws in Tata Motors' iRA 2.0 and iRA.ev apps. The vulnerabilities allow attackers to steal hardcoded credentials, capture authentication tokens via WebView or debug logs, and intercept network traffic through weak SSL pinning. Exploits could enable impersonation and unauthorized access to vehicle services. Users should update to iRA 2.0 version 26.8.2 or iRA.ev version 26.9.1. No active exploitation has been reported.