Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →PCAutomotive researchers reported remotely compromising the infotainment system of one tested 2020 Nissan Leaf ZE1 and using that access to control selected body functions. Their “giant RC car” description is a metaphor for a security demonstration—not a feature available to the public, and not evidence that every Leaf can be remotely driven.
What the researchers demonstrated
PCAutomotive says it verified the vulnerabilities on a 2020 Nissan Leaf ZE1 equipped with a Bosch infotainment ECU running software version 283C30861E. That system exposes Wi-Fi, Bluetooth and USB connections and connects with other vehicle electronic control units over the CAN bus, the network that allows vehicle systems to exchange messages. The researchers’ advisory describes a chain that began with Bluetooth access and led to control of the infotainment unit, access to vehicle functions and exposure of private information.
In its Black Hat Asia 2025 briefing announcement, PCAutomotive summarized the work as “our successful remote compromise of a 2020 Nissan Leaf,” saying the demonstration showed how vulnerabilities in connected systems could be used to reach critical body functions. This is the researchers’ account of their demonstration, not a Nissan incident report or evidence of attacks on cars in everyday use.
How the attack chain worked
The high-level sequence described by PCAutomotive was Bluetooth access, escalation within the infotainment system, then a route to the CAN bus. The researchers say Bluetooth weaknesses provided initial access and that they bypassed secure boot to escalate access. They also describe a command-and-control channel over DNS and compromising a separate communications CPU to interface with the vehicle network. The announcement gives the chain’s outline; it should not be read as a set of instructions for attempting an intrusion.
#1 Best Overall
- Package Includes: The 11-piece set includes 1 high side quick coupler 1 low side quick coupler 1 valve core removal tool 2 seal caps 2 seal rings 2 R134A valve cores and 4 R12 valve cores. Another includes 1 single head valve core remover 2 dual head valve core removers 8 car AC caps (6 sizes) 16 R134A valve cores and 32 R12 valve cores
- Practical Function: This AC valve core kit allows replacement of leaking refrigerant valve cores and repairs faulty air conditioning systems. It reliably restores cooling performance supporting routine maintenance tasks while addressing common automotive AC issues efficiently
- Quality Material: This AC valve core kit is made from premium stainless steel offering corrosion resistance and compatibility during regular maintenance tasks. Its durable structure features high hardness and strong impact resistance maintaining reliable performance without cracking or breaking easily under repeated use
- Wide Application: This kit is suitable for maintenance and replacement work in most car AC systems providing a tight and reliable sealing connection. It also works with AC systems in residential and commercial environments offering convenient compatibility for a wide range of standard valve core replacement applications
- Easy to Carry: This AC valve core kit contains most components required for one-stop repair and replacement work in automotive air conditioning systems. Its compact structure allows convenient carrying and storage fitting easily inside a toolbox or vehicle trunk for quick access during maintenance tasks
Once connected to vehicle networks, compromised software may be able to reach functions beyond entertainment. In this demonstration, the researchers reported control over particular body systems and access to some data. The finding depends on the tested vehicle and software configuration; it does not establish that the same path works on other Leaf versions.
What functions and information were reportedly exposed
PCAutomotive’s advisory lists these capabilities on the tested configuration:
Rank #2
- 【High-Quality Materials】: The 134a adapter fittings are made of brass, combining high strength, corrosion resistance, and heat resistance, the robust structure can withstand high-pressure environments, ensuring no deformation or rust during long-term use.
- 【Size Specifications】: The low-pressure side adapter measures 1/4" SAE (7/16''-20) ×13mm, and the high-pressure side is 1/4" SAE (7/16''-20) ×16mm. The precise dimensions fit most vehicle air conditioning pipeline interfaces, compatible with connection needs under different pressure conditions.
- 【Easy to Use】: The AC fitting conversion adapter requires no extra tools for use. Simply align the interface and tighten it clockwise to quickly convert between R12 and R134A systems, offering simple and efficient operation to significantly improve maintenance efficiency.
- 【Wide Application】: The r12 to r134a adapter is suitable for various automotive air conditioning systems and small refrigeration equipment with 1/4" SAE or 7/16" - 20UNF R12/R22 interfaces, easily enables refrigerant system upgrades, detection, and maintenance.
- 【Thoughtful Design】: The r12 to r134a conversion kit features a dust cap and detachable valve core design, effectively blocking dust and impurities from entering the pipeline. It fits tightly after installation, significantly reducing refrigerant leakage risks and ensuring operational safety and system stability.
- Control of central door locks, mirrors, windows, wipers, washers and the horn.
- Steering control only at speeds below approximately 10 km/h, according to the researchers’ demonstration.
- Control of the infotainment screen and sound system.
- Potential access to driver location and audio from the cabin microphone.
The speed qualification matters: the finding is not that researchers demonstrated unrestricted steering at road speeds. Nor does a demonstrated capability by itself establish that an attacker used it against a customer vehicle. The privacy findings also matter: a compromise could expose information, not just affect physical controls.
Why it was called a “giant RC car”
Hackaday used the phrase “1600 kg RC car” in its June 24, 2025 coverage, framing the possibility of remote vehicle control in memorable terms. The researchers reportedly built test benches from scavenged infotainment systems and wiring harnesses. The phrase is a headline metaphor, not a literal remote-control mode, a measured vehicle weight for this experiment, or proof that the Leaf was operated like a toy car.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Rank #3
- High Brightness: The xenon headlight ballast delivers higher brightness, providing a wider and clearer illumination range. This greatly enhances driving safety at night or in low-light conditions, which effectively reduces visual blind spots caused by insufficient light
- Excellent Performance: Our xenon headlight ballast is built with a high-voltage pack and is equipped with output open-circuit and short-circuit protection, as well as input under-voltage and over-voltage protection. It delivers stable output voltage to ensure proper operation of xenon lamps
- Durable Material: Crafted from aluminum alloy material, the ballast resists wear and efficiently dissipates heat and is not prone to damage or breakage during daily use. Its superior waterproof and dustproof properties further enhance the ballast's longevity
- Easy to Use: Without complex wiring, users can easily install the ballast. With a plug-and-play design, simply connect the ballast interface to the corresponding vehicle circuit interface. This simplifies the wiring process, saving effort for both regular car owners and professional technicians
- Two Styles: We offer 35W and 55W ballasts. The 35W ballast saves 40% more energy than traditional halogen bulbs, meeting everyday lighting needs. The 55W ballast provides stronger light output, suitable for vehicles requiring higher brightness levels
Which vulnerabilities were listed
PCAutomotive’s 2025 advisory identifies several flaws in the tested infotainment system. Its listed CVSS 3.1 ratings include one critical issue and three high-severity issues:
| CVE | Issue as described by PCAutomotive | CVSS 3.1 rating |
|---|---|---|
| CVE-2025-32058 | Stack overflow while processing requests over the infotainment ECU’s INC interface on the RH850 side | 9.3, Critical |
| CVE-2025-32059 | Bluetooth stack vulnerability leading to remote code execution | 8.8, High |
| CVE-2025-32061 | Bluetooth stack vulnerability leading to remote code execution | 8.8, High |
| CVE-2025-32062 | Bluetooth stack vulnerability leading to remote code execution | 8.8, High |
These scores describe the severity ratings assigned to the listed vulnerabilities; they do not say how many vehicles are affected or whether a flaw has been exploited in the wild.
Rank #4
- [Product Function]: The car start button kit allows for quick vehicle start; a single press activates the engine instantly, eliminating the need for key insertion and turning.
- [Easy to Use]: The car start button kit is simple to use. It requires unlocking/releasing/removing the vehicle's steering wheel lock; installation by a professional car anti-theft system installer is recommended.
- [Safe and Reliable]: The combination of the car start system and the car's concealed locking system ensures that only authorized users can start the vehicle, effectively preventing theft.
- [Automatic Locking]: The car start system automatically locks the engine after the vehicle has been parked for 50 seconds. Unlocking is also very convenient; simply bring the key approximately 5 cm close to the detection ring to automatically release the lock.
- [Wide Application]: The car start button kit is suitable for most cars, SUVs, MPVs, etc., and is compatible with most 12V vehicles. It is easy to install and use, meeting diverse needs.
What is known about disclosure—and what is not known about a fix
PCAutomotive says it sent its advisory to Nissan’s cybersecurity team on August 2, 2023. Following exchanges and a demonstration of the full attack, Nissan confirmed the vulnerabilities on January 26, 2024 and began planning mitigations, according to the advisory. PCAutomotive later shared its findings with Bosch PSIRT. The advisory says Bosch accepted publication in March 2025 and declined to register CVEs; PCAutomotive then requested CVE registration through ASRG.
The available account documents disclosure and mitigation planning, but does not confirm that a fix was completed or deployed. It does not name a corrected software version or provide verified, Nissan-specific owner instructions. Hackaday’s general suggestion to keep infotainment software updated is not proof that an update addressing these vulnerabilities is available. Owners who want current guidance should ask Nissan or an authorized dealer about their specific vehicle and software; this is a prudent way to check status, not a claim that Nissan has issued a particular remedy.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Best Value
- 【1200% Brighter Than Stock Bulb– Drive with Superior Clarity】Termitor H11 9005 bulbs Combo are equipped with 16 high-output CSP chips per bulb, delivering up to 1200% more brightness than stock bulbs. The 6500K cool white light provides visibility and reduces eye strain, helping you see farther and at night for , more confident driving in any low-light condition.
- 【True 1:1 Smallest Size – Quick & Easy Installation】Built with a compact 1:1 design that matches original bulb size, our H9 H8 HB3 Fog Bulb for most vehicles. The plug-and-play, non-polarity setup requires no tools, no extra wiring, and no modifications—just install in minutes and hit the road with confidence.
- 【Perfect Beam Pattern – No Glare, No Dark Spots】Termitor H11 9005 Light bulbs are precisely aligned to match the original filament position, creating a clean, focused beam with no glare, shadows, or dark spots. The cut-off line improves nighttime visibility without blinding oncoming traffic, ensuring a , more comfortable drive and others on the road.
- 【Built to Last – 75,000+ Hour Lifespan】Our H11 9005 bulbs is engineered with aviation-grade aluminum, an oversized copper base, and dual liquid-cooled tubes for exceptional heat management. A 22,000 RPM silent fan and IP68 waterproof rating long-lasting, reliable performance in all weather. Enjoy over 75,000 hours of brilliant lighting—no more frequent bulb changes.
- 【99.5% Compatibility – No Error Codes, No Hassle】Featuring an enhanced CANbus system and adaptive power output, these bulbs are compatible with 99% of vehicle systems. Most installs are seamless, though a few models may need a CANbus decoder. If needed, please contact us. Termitor’s support team is always here to help.
Does this affect every Nissan Leaf?
No broad fleet conclusion is established. PCAutomotive reports verification on one 2020 Leaf ZE1 configuration with the Bosch ECU and software version 283C30861E. The advisory does not establish whether other model years, regions, infotainment ECU variants or software versions are affected. The findings also do not establish a population-level count of vulnerable cars or real-world incidents.
So the accurate takeaway is narrow: researchers demonstrated a serious connected-system compromise on a specified 2020 Leaf configuration, with reported access to selected controls and sensitive data. Whether other vehicles share the same exposure, and whether mitigations have reached owners, is not confirmed by the published account.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
