As I previously worked a lot on vulnerability research within cars infotainment systems, I'm not surprised in the slightest to see how exposed their dealership/employee portals are.
Never, this research was very well executed, and as always, I highly appreciate a detailed, technical blog detailing all the steps and the final vulnerabilities. Kodus @samwcyo (seems that they are not on mastodon :()!

https://samcurry.net/web-hackers-vs-the-auto-industry/

#automotivesecurity #websecurity #vulnerabilities #researchblog