Tata Motors Clarifies CERT-In iRA App Vulnerabilities: Security Issues Fixed 

Tata Motors has rectified the vulnerabilities identified in the IRA 2.0 and IRA.ev (Connected Car Tech) applications have been fixed via an OTA update. The Indian Computer Emergency Response Team (CERT-In) had issued app vulnerabilities on November 4. 

The Cyber Hiccup: What Did CERT-In Find? 

These applications were providing access to crucial vehicle related information such as remote vehicle features, car status and trip information. These apps come standard in popular models like Tata Curvv EV, Nexon EV, Harrier EV, and the recently launched Sierra EV.

According to CERT-In, the unpatched versions of these apps had several vulnerabilities that could have provided access to sensitive user information, or even worse, access to vehicle-related information and services. The affected software included IRA 2.0 (versions 26.7.3 and older) and iRA.ev (versions 26.7.2 and older). 

Tata Motors’ Swift Clarification: No Harm Done 

Tata Motors have handled this very seriously and issued a clarification stating that internal assessments found no evidence of unauthorised access to customer credentials or sensitive vehicle data. 

Tata Motors also said, “The vulnerabilities identified in the iRA 2.0 and iRA.ev applications have been addressed through software updates and enhanced security measures". 

In simple terms, the vulnerabilities existed, but hackers had no access. So your personal information, passwords, and vehicle data is safe and not compromised. 

Are You Safe? ( Yes, If You Update) 

Don’t worry as you don’t have to do anything complex to keep your vehicle secured. Tata Motors has rolled out necessary over-the-air (OTA) software updates in order to remove these vulnerabilities well before the CERT-In advisory kicks in. 

In order to ensure that your car is fully protected from unauthorized access, you just need to make sure that you are running the latest version of the apps. The updates are automatically recommended, just when you open the application on the phone. 

What do you need to do?

• Check your app version: Open your Google Play Store or Apple App Store. 
• UPDATE: Ensure that your iRA 2.0 is updated to iRA 26.8.2 and your iRA.ev app is updated to 26.9.1 (Or Higher).

Also check: EV Software Updates in India | Can They Improve Range and Add Features?