CERT-In warns of data theft risk in Tata Motors’ connected vehicle apps

The Indian Computer Emergency Response Team (CERT-In) on Wednesday flagged multiple vulnerabilities in select versions of Tata Motors’ iRA 2.0 and iRA.ev connected vehicle applications that could allow an attacker to get sensitive credentials or access vehicle-related information.

The severity rating for this vulnerability has been marked as “High”. Tata Motors iRA 2.0 versions 26.7.3 and below, and Tata Motors iRA.ev versions 26.7.2 and below are the impacted applications.