← Back to home
ICSA-20-219-01  ·  Published 2020-08-06  ·  View on CISA ICS-CERT ↗

Trailer Power Line Communications

CVSS 4.3 MEDIUM

Risk Summary

The National Motor Freight Traffic Association (NMFTA) and Assured Information Security (AIS) have released research detailing a vulnerability within trailer Power Line Communications (PLC) signals. Their research indicates it is possible to read PLC signals using active antennas reliably at 6 feet and up to 8 feet away, subject to environmental conditions. The researchers expect to be able to push this reception distance further with receiver improvements. The impact of this issue depends heavily on what information is being sent by ECUs on the trailer PLC bus. Typical trailer traffic is only ABS fault messages and will thus have minimal loss of confidentiality. CISA is publishing this advisory to bring awareness to trailer and brake manufacturers who may be seeking to leverage PLC for sensitive information: e.g., air weigh axles or key exchange in setting up high-speed wireless links in future tractor-trailer interfaces.

CVEs (1)

Remediations

  • No current mitigations have been developed alongside this research. Future designs can mitigate this issue by reducing radiated emissions using shorter lengths of PLC buses and reduced transmit voltage. The goal of this advisory is to bring awareness of the issue to the transportation systems sector.

Affected Vendors

multiple trailer and brake manufacturers

Affected Products (1)

multiple trailer and brake manufacturers · Power Line Communications Bus / PLC4TRUCKS / J2497 vers:all/*

Affected Sectors

Transportation Systems

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more