Headline
CVE-2023-41442: Cyber Terror on Wheels: Remotely Hijacking 600+ Indian Automobiles
An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component.
2023-08-22 16:25:10,221 - Topic: Bgauss/MQTT_v1/Payload | Message: *,054016081714307369035636176,Mini/L433/Bgauss,230822 162448,LXV3.1,20230822105506,11.037950,77.388293,^,0,0,0,0,0,0,0,0,^,f,2,f,6,f,a,f,6,^,f,1,e,ff,f,3,f,6,^,e,f2,f,1,f,4,f,1,^,f,0,f,5,f,2,f,1c,^,2,6d,0,1d,4d,20,64,0,^,37,16,0,4,7f,7,98,4a,^,25,26,21,22,21,0,0,0,^,0,0,f,1c,e,f2,0,0,^,34,65,39,61,32,32,35,34,^,54,0,0,0,0,0,0,0,^,7,e7,0,1,0,11,0,8,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,b,b,b,b,b,b,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,7,e6,0,7,0,1,0,1,^,0,0,0,0,0,0,0,0,^,1e,c8,5,1e,a,5d,a,4d,^,7,e6,0,7,0,13,0,1,^,f,44,0,5c,0,0,48,40,^,80,80,80,0,0,0,f,0,^,0,16,0,7,0,d,75,31,^,0,0,0,0,0,0,0,0,^,61,b,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,47,e7,c3,0,0,0,0,^,7,e6,0,a,0,d,0,6,^,c0,a9,a2,4d,0,48,2c,4a,^,be,d1,5,29,20,0,0,aa,26,0,0,#
2023-08-22 16:25:10,350 - Topic: Poc_Locohe/MQTT_v1/Payload | Message: *,054061957714817894445898342,TorMini_4G_Rev1.0_0223/Cummins,20230822105501,V1.0,20230822162506,105501,22.291063,N,86.849556,E,220823,00011,L,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,TD_000000,E,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,19,99,#
2023-08-22 16:25:10,964 - Topic: Bgauss/MQTT_v1/Payload | Message: *,054022789514975180843997742,Mini/L433/Bgauss,230822 162413,LXV3.1,20230822105505,16.860182,74.296588,^,0,0,0,0,0,0,0,0,^,e,bc,e,bf,e,be,e,c1,^,e,ba,e,c2,e,c0,e,c2,^,e,b6,e,c0,e,bf,e,c2,^,e,be,e,bf,e,bd,e,c9,^,2,5c,6,1f,42,20,64,0,^,37,16,0,18,c2,7,11,45,^,24,26,21,21,21,0,0,0,^,0,0,e,c9,e,b6,0,0,^,32,63,31,38,65,30,38,33,^,54,0,0,0,0,0,0,0,^,7,e6,0,6,0,1b,0,6,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,5,5,5,5,5,5,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,7,e6,0,7,0,1,0,1,^,0,0,0,0,0,0,0,0,^,1d,c1,8,2b,12,34,a,25,^,7,e6,0,7,0,13,0,1,^,18,24,0,56,0,0,53,40,^,80,80,80,0,0,0,f,0,^,0,16,0,7,0,d,75,31,^,0,0,0,0,0,0,0,0,^,5f,8d,7,d0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,a2,5e,ba,0,0,0,0,^,0,16,0,8,0,b,0,4,^,c0,a9,a2,41,0,44,2c,49,^,2f,31,c1,43,20,0,0,aa,22,0,0,#
2023-08-22 16:25:11,005 - Topic: Omega/MQTT_v1/Payload | Message: *,054016081714307369016553652,TorMini/OmegaSeiki/0422_Payload,2023-8-22 16:25:8,v1.3,20230822105508,28.498319,77.408490,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,4,0,0,0,3c,^,0,0,0,0,0,0,0,0,^,0,0,0,0,b4,5a,ff,f8,^,f,d2,e,54,b,cc,e,47,^,cd,fc,2b,2,66,ff,fd,1,^,0,0,0,0,0,0,0,0,^,0,2,a9,90,2,0,0,0,^,0,0,0,0,10,0,0,1,^,1,0,64,0,0,0,7b,2a,19,0,#
2023-08-22 16:25:11,005 - Topic: Omega/MQTT_v1/Geo | Message: *,054016081714307369045242986,TorMini/OmegaSeiki/0422_Geo,2023-8-22 16:25:8,v1.3, 1,1,20230822105508.000,28.572833,77.163264,253.959,24.71,247.9,2,0.8,1.1,0.9,12,12,9,41,29,0,1537,0,0,4,3,#
2023-08-22 16:25:11,005 - Topic: Omega/MQTT_v1/Geo | Message: *,054016081714307369032687039,TorMini/OmegaSeiki/0422_Geo,2023-8-22 16:25:7,v1.3, 1,1,20230822105507.000,28.678513,77.373997,230.622,0.26,273.2,2,0.8,1.1,0.8,11,13,9,30,0,0,1480,0,0,3,3,#
2023-08-22 16:25:11,005 - Topic: Omega/MQTT_v1/Geo | Message: *,054016081714307369043997801,TorMini/OmegaSeiki/0422_Geo,2023-8-22 16:24:30,v1.3, 1,1,20230822105426.000,28.648279,77.121196,215.385,0.22,46.9,2,0.8,1.2,0.9,11,12,9,32,3,0,1526,0,0,4,4,#
2023-08-22 16:25:11,094 - Topic: Poc_Locohe/MQTT_v1/Payload | Message: *,054061957714817894442293862,TorMini_4G_Rev1.0_0223/Cummins,20230822105502,V1.0,20230822162451,105502,11.672228,N,92.735260,E,220823,00012,L,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,TD_000000,E,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,Er2,20,99,#
2023-08-22 16:25:11,374 - Topic: Lohia/MQTT_v1/Payload | Message: *,054022789514975180845177458,TorMini/Lohia/0222_Payload,2023-8-22 16:25:8,v1.2,20230822105508,17.716721,83.328368,^,4,0,0,20,0,0,0,0,^,ff,3f,0,0,0,0,0,0,^,4,0,0,4,0,0,0,24,^,0,0,91,4e,0,0,0,0,^,0,0,0,0,0,0,3e,2a,^,ff,ff,ff,ff,7b,f9,0,0,^,1,1a,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,21,0,#
2023-08-22 16:25:11,419 - Topic: Bgauss/MQTT_v1/Payload | Message: *,054055326513800775772031708,Mini/L433/Bgauss,230822 162504,LXV3.1,0,0,0,^,0,0,0,0,0,0,0,0,^,f,30,f,36,f,37,f,35,^,f,33,f,33,f,36,f,38,^,f,2c,f,34,f,34,f,35,^,f,35,f,35,f,34,f,40,^,2,6f,3,d5,4d,20,64,0,^,37,16,0,10,27,7,a1,4b,^,21,22,1f,1f,1e,0,0,0,^,0,0,f,45,f,34,0,0,^,31,64,37,39,32,33,37,39,^,54,0,0,0,0,0,0,0,^,7,e6,0,6,0,1b,0,6,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,db,db,db,db,db,db,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,7,e6,0,7,0,1,0,1,^,0,0,0,0,0,0,0,0,^,1e,c8,8,a3,12,e1,8,90,^,7,e6,0,7,0,13,0,1,^,1e,24,0,4d,0,0,5a,40,^,0,0,80,0,0,0,f,0,^,0,16,0,7,0,d,75,31,^,0,0,0,0,0,0,0,0,^,5b,b2,0,0,0,0,0,0,^,0,0,0,0,0,0,0,0,^,0,8a,83,76,0,0,0,0,^,0,16,0,8,0,b,0,4,^,c0,a9,a3,4d,0,44,2c,47,^,ee,c2,85,31,20,0,0,aa,24,0,1,#
2023-08-22 16:25:33,815 - Topic: Bgauss/MQTT_v1/Diagnostic | Message: *,054016081714307369032424913_Conf,Diagnostic,Mini/L433/Bgauss,000101 000000,LXV3.1,CAN ID’s : b9,b3,b4,b5,b6,bb,b7,bf,b2,b0,b1,be,b8,351,401,402,403,404,405,ba,bd,201,104,100,110,101,150,151,152,55,51,103,60,50,53,#