NHTSA Complaint #11021447 — 2017 BENTLEY BENTAYGA

EASY CYBER ATTACK AGAINST NEW BENTLEY - CRITICAL ISSUE IT IS INCREDIBLY DANGEROUS TO CONNECT THIS CAR TO THE INTERNET USING A SIM CARD, AS THE CAR IS LITTERED WITH HIGH IMPACT VULNERABILITIES THAT CAN EASILY BE EXPLOITED TO SHUT DOWN SYSTEMS, THIS WOULD DENY SERVICE OF SYSTEMS, LIKE STEERING OR BRAKES, OR AIRBAGS. THERE ARE NEARLY 100 CONNECTED DEVICES IN THE CAR THAT IS CENTRALLY MANAGED USING ONE COMPUTER SYSTEMS THAT IS VERY VULNERABLE. THIS IS A FUNDAMENTAL PROBLEM AT BENTLEY HQ, AS ONE OF THE VULNERABILITIES WAS FIRST IDENTIFIED IN 1999, IT WAS PATCHED IN 1999 AND YET A 2017 CAR STILL HAS THE VULNERABILITY WITHOUT ANY PATCH. THIS MEANS NOT ONLY IS THIS CAR EXTREMELY VULNERABLE TO CYBER ATTACK BUT THE PROCESS TO DESIGN THE SOFTWARE IN THE FACTORY HAD LITTLE TO NO REGARD TO CUSTOMER SECURITY. IT IS POSSIBLE TO ELECTRONICALLY SWEEP ALL IP'S IN THE USA SEARCHING FOR BENTLEY BENTAGYA'S AND THEN CONSTRUCT A CYBER ATTACK AT ALL VEHICLES SIMULTANEOUSLY. THIS IS A VERY VERY SERIOUS ISSUE. I NOTIFIED BENTLEY AND PROVIDED THE FULL CYBER ASSESSMENT REPORT AND HAD NOT REPLY WHATSOEVER. THEY SHOULD IMMEDIATELY HAVE EVERY CUSTOMER REMOVE THE SIM CARD (THIS SHOULD BE A CRITICAL RECALL) FOR THE VEHICLE TO PREVENT AN ATTACK FROM THE OTHER SIDE OF THE WORLD. THEN THEY NEED TO CONSIDER LOCALISED ATTACKS AS THE CAR TRAVELS WITH A WIFI BUBBLE THAT IS EXPLOITABLE. THIS IS HOW THIS REPORT ATTACHED WAS PREPARED IN THE FIRST INSTANCE.