Home / Technology / Malicious SIMs Hijack EV Chargers with Old Commands
Malicious SIMs Hijack EV Chargers with Old Commands
19 Aug
Summary
- A standard SIM command allows malicious cards to execute code within EV chargers.
- The vulnerability affects machine-to-machine hardware more than smartphones.
- Exploitation requires physical SIM access and a hardened Qualcomm configuration exists.
A security vulnerability has been identified that allows a malicious SIM card to execute arbitrary code within electric vehicle chargers and other connected devices. This exploit leverages a standardized SIM command, Proactive SIM, specifically the RUN AT command, which dates back to 1981. Researchers demonstrated this by achieving code execution on a commercial EV charger.
The vulnerability is primarily found in machine-to-machine hardware, with six out of eight tested cellular modules being exposed, compared to three out of eighteen smartphones. Devices affected include specific Oppo and Asus models, but notably not iPhones or Pixels. The issue is concentrated in hardware running Qualcomm chips.
To exploit this flaw, an attacker must have physical control of the SIM card. Qualcomm has since developed a hardened configuration that disables this interface by default, which is expected to be standard on future devices. While the attack requires physical access, the risk to unattended IoT equipment with accessible SIM trays is considered significant.
