Norwegian Tests Reveal OTA Vulnerability Allowing Remote Access to Electric Bus Control Systems

According to Norwegian bus company Ruter, tests conducted late last year on two electric buses revealed a vulnerability in over-the-air (OTA) technology that could allow remote access to vehicle control systems. The company found that one bus had potential risks linked to OTA functionality, with access to the battery and power supply control system possible via mobile network through a Romanian SIM card.

The investigation prompted the U.K. and Denmark to conduct their own security reviews into electric buses made by Chinese firm Yutong. In May, the American Enterprise Institute recommended additional security reviews and restrictions on certain foreign-made hardware and software in vehicles to protect against foreign espionage threats.