Pwn2Own Automotive Contest to Feature Kenwood DMX958XR Model
/ 3 min read
Quick take - The upcoming Pwn2Own Automotive contest will focus on the Kenwood DMX958XR infotainment system, highlighting its features and internal components, while providing a platform for vulnerability research scheduled for January 2025 in Tokyo.
Fast Facts
- The Pwn2Own Automotive contest will feature the Kenwood DMX958XR IVI head unit, emphasizing its support for wired and wireless Android Auto and Apple CarPlay.
- The DMX958XR includes functionalities like USB media playback and wireless mirroring, with a complex assembly of interconnected boards.
- Key components on the main board include a video processing IC, power management IC, NAND flash memory, and a Telechips TCC8974 SoC designed for IVI solutions.
- The Murata radio module manages Wi-Fi and Bluetooth but lacks a publicly available datasheet; a debug connector allows access to a Linux root shell for vulnerability research.
- The Automotive Pwn2Own event is scheduled for January 2025 at the Automotive World conference in Tokyo, with early registration encouraged.
Upcoming Pwn2Own Automotive Contest
The upcoming Pwn2Own Automotive contest is set to feature four in-vehicle infotainment (IVI) head units, with a particular focus on the Kenwood DMX958XR model.
Kenwood DMX958XR Features
This double DIN unit is notable for its support of both wired and wireless Android Auto and Apple CarPlay. It also offers additional functionalities such as USB media playback and wireless mirroring capabilities. Detailed internal examinations of the DMX958XR reveal a complex assembly of multiple interconnected boards.
The main board, which is easily accessible, features a variety of critical components. On its topside, it houses a video processing integrated circuit (IC), a power management IC (PMIC), NAND flash memory, and two DDR3 SDRAM chips. The underside of this board contains a system on chip (SoC), a radio module, eMMC storage, and additional RAM.
Key Components and Capabilities
Significantly, the Murata radio module, identified as LBEE6ZZ1WD-334, is responsible for managing Wi-Fi and Bluetooth functionalities. However, it currently lacks a publicly available datasheet. The Telechips TCC8974 SoC, specifically designed for IVI and cluster solutions, supports multiple operating systems, including Android, Linux, and QNX. This SoC utilizes a 32-bit ARM core and is equipped with multimedia hardware acceleration capabilities, supported by additional SDRAM and eMMC storage.
Other boards within the DMX958XR are dedicated to various functions such as GPS, audio processing, and camera integration. A notable feature is a debug connector that provides access to a Linux login prompt over UART at a baud rate of 115200bps. If accessed with the correct credentials, this connector allows users to gain a root shell, which could be pivotal for vulnerability research.
Event Details
The Automotive Pwn2Own event, where these findings could potentially be put to the test, is scheduled for January 2025. It will take place at the Automotive World conference in Tokyo. The event organizers are encouraging early registration and inquiries. They invite readers to follow their social media channels for updates on exploit techniques and security patches related to automotive technology.
Original Source: Read the Full Article Here
