Default ‘admin:admin’ Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars

Security researchers were able to access systems at two automakers using the default ‘admin:admin’ password on an exposed server, giving them the ability to unlock and start customers' cars and track their locations. The research shows how a single unchanged default credential can expose connected-vehicle functions to remote abuse.