Security Flaws in Car Manufacturer’s Online Dealership Portal Exposed Customer Data
A recent discovery by security researcher Eaton Zveare has revealed serious flaws in a carmaker’s online dealership portal, putting the private information and vehicle data of its customers at risk. These vulnerabilities could have potentially allowed hackers to remotely access and control any of the carmaker’s vehicles.
Zveare, who works at software delivery company Harness, found that the flaw he uncovered enabled the creation of an admin account with unrestricted access to the carmaker’s centralized web portal. This account could be used to access personal and financial data of customers, track vehicles, and even enroll customers in features that allow remote control of certain car functions.
While Zveare has chosen not to disclose the name of the carmaker, he did mention that it is a well-known automaker with multiple popular sub-brands. This discovery sheds light on the security vulnerabilities present in dealership systems, which often have broad access to customer and vehicle information.
Having previously identified bugs in carmakers’ customer systems and vehicle management systems, Zveare stumbled upon these flaws earlier this year during a weekend project. Despite the challenge of finding the security flaws in the portal’s login system, Zveare managed to bypass the login mechanism by creating a new “national admin” account.
The buggy code loaded in the user’s browser upon opening the portal’s login page allowed Zveare to modify the code and circumvent the login security checks. Fortunately, the carmaker found no evidence of prior exploitation, indicating that Zveare was the first to identify and report the vulnerabilities.
Once logged in, the admin account provided access to over 1,000 dealerships across the United States. This access allowed Zveare to view dealers’ financials, private data, and customer leads without detection.
One alarming feature found within the dealership portal was a national consumer lookup tool that permitted users to retrieve vehicle and driver data using minimal information. Zveare demonstrated the tool’s capabilities by identifying a car’s owner using only their first and last name or vehicle identification number.
Additionally, Zveare was able to pair any vehicle with a mobile account, granting remote control over certain car functions. By transferring ownership of a vehicle to an account controlled by Zveare, he showcased how easily this could be done with just a simple attestation of legitimacy.
Although Zveare did not attempt to drive away with a vehicle, he highlighted the potential for exploitation by thieves to break into and steal from vehicles. Furthermore, single sign-on functionality allowed access to other dealer systems linked to the portal, enabling user impersonation and unauthorized access to additional systems.
After disclosing the vulnerabilities to the carmaker in February 2025, the issues were promptly addressed within a week. Zveare emphasized the critical role of proper authentication in preventing such security breaches, stressing the importance of securing APIs to safeguard customer data.
Overall, this incident serves as a reminder of the ongoing security risks faced by online dealership portals and the need for robust cybersecurity measures to protect customer information and prevent unauthorized access to vehicle systems.
The world is a vast and diverse place, with countless wonders and mysteries waiting to be discovered. From the depths of the ocean to the peaks of the highest mountains, there is no shortage of beauty and intrigue to be found. But one of the most fascinating aspects of our planet is the incredible diversity of life that exists within it.
There are an estimated 8.7 million species of plants and animals on Earth, with new species being discovered all the time. Each of these species is unique and plays a vital role in the delicate balance of our planet’s ecosystems. From the tiniest insects to the largest mammals, every living creature has a part to play in ensuring the health and sustainability of our world.
But this diversity is not just limited to the different species of animals and plants that inhabit the Earth. There is also an incredible variety of habitats and environments that support this rich tapestry of life. From lush rainforests to barren deserts, each habitat provides a home for a unique array of species that have adapted to thrive in their specific surroundings.
One of the most remarkable examples of this diversity can be seen in the Amazon rainforest, which is home to an estimated 10% of the world’s known species. This vast expanse of lush greenery is teeming with life, from colorful birds and monkeys swinging through the trees to elusive jaguars prowling through the undergrowth. The Amazon is a true testament to the incredible biodiversity that exists on our planet.
But it is not just in exotic locations like the Amazon that we can find examples of biodiversity. Even in our own backyards, there is a wealth of life waiting to be discovered. From the birds that visit our feeders to the insects that crawl through our gardens, every creature has a story to tell and a role to play in the web of life.
Sadly, this incredible diversity is under threat from a variety of factors, including habitat destruction, climate change, pollution, and overexploitation. As human activities continue to encroach on wild spaces and disrupt the delicate balance of nature, many species are facing extinction at an alarming rate.
But there is hope. Through conservation efforts and sustainable practices, we can work to protect and preserve the incredible diversity of life that exists on our planet. By taking steps to reduce our impact on the environment and support initiatives that aim to safeguard our natural world, we can ensure that future generations will be able to enjoy the wonders of biodiversity for years to come.
In conclusion, the diversity of life on Earth is truly a marvel to behold. From the smallest insects to the largest mammals, every creature has a part to play in the intricate web of life that sustains our planet. By working together to protect and preserve this biodiversity, we can ensure that our world remains a vibrant and thriving place for all living things.
