Internet of Things Exploration: 2016 Ford Flex
ID: c307d7f9-d9e7-5b25-baa5-d7cc4ccf5f76
STIX ID: report--c307d7f9-d9e7-5b25-baa5-d7cc4ccf5f76
Feed Name: Black Hills Infosec Blog
Threat Score
A researcher analyzed a 2016 Ford Sync OTA update process and found multiple security shortcomings: the infotainment unit will connect to open Wi‑Fi without warning, runs an mDNS daemon on the network, exchanges update metadata and downloads over cleartext HTTP (with payloads only Base64-obfuscated), and lacks authentication for update content—allowing an attacker in a MITM position to identify vehicles and potentially manipulate updates.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.