Researchers find seven new vulnerabilities in automotive CAN XL standard

Researchers from Georgia Tech, QCRI and Purdue published the first formal security analysis of the CAN XL standard. The analysis of its MAC sub-layer shows CAN XL retains all known classic CAN issues and introduces seven new vulnerabilities, arguably worsening security.

• CAN XL retains all known MAC sub-layer issues of classic CAN
• Seven new vulnerabilities found in the CAN XL standard
• Vulnerabilities validated on commercial CAN XL controllers
• Two multi-stage attacks demonstrated on a realistic vehicle testbed