VDA Shenanigans: Attacking & Defending the Truck Part that Gets Left Behind
Wyatt Ford and Alex Reuter investigate security weaknesses in Vehicle Diagnostic Adapters (VDAs) used on heavy commercial trucks, exploring firmware updates and attack surfaces.
Summary
Insecure Firmware Updates in Heavy Vehicle Adapters
Vehicle Diagnostic Adapters (VDAs) connect commercial truck electronics to diagnostic computers, playing a vital role in maintenance and heavy-duty fleet operations. Despite their privileged access to vehicle control units and diagnostic networks, VDAs frequently suffer from lax firmware update validation.
Attacking the Overlooked Interface
Wyatt Ford and Alex Reuter reverse engineer standard commercial VDAs to expose common software vulnerabilities and unprotected communication interfaces. They demonstrate how an attacker can leverage vulnerable adapter hardware to bridge external networks directly onto the truck's J1939 and CAN buses.
Defensive Architecture and Telematics Hardening
The speakers propose concrete architectural improvements for fleet operators and hardware manufacturers, emphasizing cryptographic signature verification on adapter firmware, secure boot enforcement, and rigorous physical interface auditing.
Related talks
Car Hacking Village·26 min
collin · oblivion
Reverse engineers a commercial odometer rollback tool, extracting locked STM32 firmware and showing how CAN messages are intercepted and rewritten.
Car Hacking Village·46 min
Ian Tabor · Ken Tindell
Automotive security experts reverse engineer a real-world CAN Injection theft tool disguised as a Bluetooth speaker used to steal a Toyota RAV4.
Car Hacking Village·45 min
David Rogers
David Rogers integrates commercial mileage clocking tools and remote braking overrides into an immersive vehicle simulator rig to safely study cyber-physical attacks.