Exploiting Wireless Side Channels in EV Charging
Demonstrates wireless electromagnetic leakage in EV Combined Charging System (CCS) cables, using SDRs to eavesdrop on power-line communications and disrupt charging.
Summary
Electromagnetic Leakage in EV Charging Cables
The Combined Charging System (CCS) and North American Charging Standard (NACS) utilize Power-Line Communication (PLC) over physical charging cables for vehicle-to-charger telemetry.
Eavesdropping via Unintentional Radiated Emissions
Sebastian Köhler and Richard Baker demonstrate that unshielded charging cables act as broadcast antennas, radiating high-frequency HomePlug Green PHY PLC signals into ambient space.
Wireless Injection and Denial-of-Service with SDRs
Using low-cost software-defined radios (SDRs), an attacker within hundreds of meters can passively intercept session tokens or inject malicious frames to terminate EV charging cycles abruptly.
Standardization Shortcomings and Hardware Hardening
The authors analyze why architectural flaws persist across global EV standards and outline hardware shielding and cryptographic countermeasures for charging networks.
Related talks
Car Hacking Village·26 min
Yago Lizarribar
Reveals how unencrypted RF broadcasts from direct Tire Pressure Monitoring Systems (TPMS) enable vehicle tracking and custom message injection to spoof ECUs.
Car Hacking Village·21 min
Kai Ching Wang · Chiao-Lin Yu
Demonstrates an attack chain starting from passenger public Wi-Fi to breach vehicular routers, hijack on-board units, and manipulate smart bus displays.
Car Hacking Village·40 min
Ayyapan Rajesh
Ayyapan Rajesh details CVE-2022-27254, demonstrating how unencrypted fixed rolling codes in Honda remote keyless entry systems allow replay and vehicle theft.