The vulnerability was discovered in the Volkswagen Golf GTE and an Audi3 Sportback e-tron, which were both manufactured in 2015. Computest researchers said they were able to leverage an undisclosed vulnerability in Harman-manufactured modular infotainment (MIB) platforms in the affected car models to access the IVI system remotely via Wi-Fi. The researchers also found that they could access the system s multimedia applications unit (MMX) main processor, which is responsible for tasks like screen compositing and multimedia decoding. Volkswagen has fixed the vulnerabilities, and said they have been fixed in a software update.
Source: https://threatpost.com/volkswagen-cars-open-to-remote-hacking-researchers-warn/131571/