Blind Trailer Shouting

Tanker trailers have a powerline network, PLC4TRUCKS, which is unintentionally accessible wirelessly (CVEs 2020-14514 and 2022-26131). Newer trailer brake controllers use diagnostic protocol KWP2000, secured with access control by seed-key. The talk shows Wireshark analysis of that diagnostic traffic and two ways past the access control: an SMT solver on a few request-response pairs, and a reset attack that makes seeds predictable. The second way is a blind wireless attack, CVE-2024-12054. The brake controller is also exposed to trailer-installed telematics. The work comes from onsite and bench tests of heavy vehicles.