Government Agency Warns of Hacking Vulnerability in Tata Connected Vehicles

India's premier cybersecurity agency, the Indian Computer Emergency Response Team (CERT-In), has issued a security advisory warning of vulnerabilities in Tata Motors' connected vehicle ecosystem. The flaws affect the iRA 2.0 and iRA.ev mobile applications, which enable remote vehicle management and monitoring features for connected Tata automobiles.

According to the government agency, the identified vulnerabilities could allow malicious actors to exploit weaknesses in the applications' security architecture. If exploited, these flaws may enable unauthorized individuals to access sensitive vehicle-related information and potentially gain control over connected vehicle functions.

The advisory underscores growing concerns around cybersecurity in India's automotive sector as vehicle-to-internet connectivity becomes increasingly common. Connected car technologies, while offering convenience features such as remote diagnostics and climate control, introduce new attack vectors that manufacturers must secure against sophisticated threat actors.

Tata Motors, India's largest automaker by market capitalization, has been aggressively expanding its connected vehicle offerings across its product lineup. The company has not yet issued a public response to the CERT-In advisory regarding remediation timelines or interim security measures for affected users.

CERT-In advisories typically recommend that affected users apply security patches and updates promptly once manufacturers release fixes. Vehicle owners using the iRA 2.0 and iRA.ev applications are advised to monitor official Tata Motors channels for security updates and guidance.