![\"2020](\"https:\/\/www.motortrend.com\/uploads\/sites\/5\/2020\/07\/2020-Honda-Civic-Si-HPT-Sedan-41.jpg\")
Recently a vulnerability was discovered by a small research team that demonstrated how an attacker could possess the ability to remotely unlock, lock, and start the engine of Honda vehicles. According to the researchers, this bug affects the immensely popular 2016-2020 Honda Civic vehicles. This however is not the first time a vulnerability like this has occurred for Honda. As recently as 2020, a similar bug was discovered in Acura TSX, Accords and the HR-V vehicle models. This vulnerability is not new and is seemingly widespread and as a Civic owner myself, I am quite concerned.\u00a0<\/p>\n\n\n\n
Why is there a security vulnerability? The culprit is remote key fobs. Remote key fobs have existed since 1982 when the French automaker Renault, implemented the first iteration of remote key fobs as a means of unlocking a vehicle without a traditional key. A decade later, the technology evolved when Mercedes-Benz implemented the first keyless remote system that allowed the user to start the engine without a traditional key. These technological advancements led to push-to-start vehicles becoming increasingly popular in modern times. Most remote key systems use radio waves to transmit information from the key fob and to the vehicle from a short distance. This allows the owner to unlock, lock, and start the engine of their vehicle remotely. Although this technology is convenient, it opens many possibilities for security vulnerabilities if not implemented properly.\u00a0<\/p>\n\n\n\n The security issue is Honda\u2019s neglect to encrypt or add any layer of security to the radio signals transmitted from a key to the vehicle. This makes the transmission extremely susceptible to simple \u2018Replay\u2019 attacks where an attacker intercepts the radio transmission and plays it again later. This simple attack can be carried out by anyone in the signal range of the key if they have the proper equipment to do so. Once an attacker has possession of the transmission it can continue to be used without limit. However, the attacker\u2019s freedom is limited as they cannot drive away with the vehicle. To do so, the physical key fob must be inside the vehicle thanks to the \u2018Immobilizer chip\u2019 present in key fobs that ensures that only a key programmed into the car is able to enable it. Although your car cannot be stolen, the contents of it are easily available and your car\u2019s engine can be left running undesirably which is especially detrimental with today\u2019s gas prices.\u00a0<\/p>\n\n\n\n To demonstrate, here is the \u201clock\u201d command that is sent by the remote key fob that would be intercepted by an attacker:\u00a0<\/p>\n\n\n\n 653-656, 667-668, 677-680, 683-684, 823-826, 837-838, 847-850, 853-854 <\/p>\n\n\n\n All an attacker needs to do to unlock the vehicle is flip the bits and send the transmission back.\u00a0<\/p>\n\n\n\n A simple and effective solution would be for Honda to implement a \u2018rolling code\u2019 system that ensures that every radio transmission is encrypted and uses a unique code every time. Although Honda is aware of the issue, they refuse to provide a solution for their customers, dismissing the issue as inevitable and downplaying it as the work of sophisticated car thieves. Unfortunately, for the time being, the only way to ensure that your vehicle is safe from such an attack is to refrain from using your remote key fob.\u00a0<\/p>\n\n\n\n Sources:<\/p>\n\n\n\n https:\/\/thehackernews.com\/2022\/03\/hondas-keyless-access-bug-could-let.html<\/a><\/p>\n\n\n\n https:\/\/www.bleepingcomputer.com\/news\/security\/honda-bug-lets-a-hacker-unlock-and-start-your-car-via-replay-attack\/<\/a><\/p>\n\n\n\n https:\/\/informationsecuritybuzz.com\/expert-comments\/honda-bug-lets-a-hacker-unlock-and-start-your-car-via-replay-attack\/<\/a><\/p>\n\n\n\n![\"How](\"https:\/\/di-uploads-pod11.dealerinspire.com\/hondaofkirkland\/uploads\/2019\/10\/Honda-CR-V-key-fob.png\")