Security vulnerabilities of android-based multimedia devices in cars

In-car multimedia devices are widely used in today's cars. Manufacturers mostly prefer the Android operating system in in-car multimedia devices. Although the vulnerabilities in the Android operating system are reduced with updates, they still continue. These systems also offer many wired and wireless connection options such as Bluetooth, Wi-Fi, 5G, USB. However, these offered connection options bring many security vulnerabilities. When these vulnerabilities are combined with the vulnerabilities of the Android operating system, serious risks await car users. In this study, penetration tests were carried out on the multimedia device in the car in order to detect the security vulnerabilities in the Android-based in-car multimedia systems. Penetration tests were carried out using the Debian-based Kali operating system with a Linux kernel. How vulnerabilities can be detected and exploited by penetrating the system over the wireless network has been implemented on a real car. Obtained results are presented in detail. In addition, solutions have been proposed against such cyber-attacks. Keywords: Android, automobile, multimedia, penetration testing, Kali Linux, Metasploit