Hackers Can Tamper With Train Brakes Using Just a Radio, Feds Warn

Cancerism and Infrastructure Security Agency (CISA), a recommended last week that one advice that could be hacked using anything other than a radio.

Defect is related to the protocol used in the train system, known as the end and head and train. A burning back end (Fred), known as the End (Eot) device, is attached to the back of a train and sends information to the appropriate device in the locomotive, called the train (hot) through radio signals. Commands can be sent to Fred to apply the brakes on the back of the train.

These devices are first installed as a substitute for shell cars in the 1980s and unfortunately there are no encryption and authentication protocols. Instead, it uses data packages sent between the front and rear of a train that includes a simple BCH inspection to detect existing system errors or interference. But now CSA warns that someone who uses a radio set by a program that is a warning that you can send fake information packages and interfere in train operations.

“Successful operation of this sensitivity can allow the attacker to send its own brake commands to the train device, causing a sudden suspension of the train or causing a sudden suspension of the train or causing a sudden suspension of the train” Buta wrote in his recommendation.

CISA, the researchers are not reported to the agency of Neil Smith and Eric Reuter.

However, in Smith, X (previously Twitter) wrote in 2012, the cyber ambulance group (ICS-CERT), which is part of the Cisu in 2012, was taken in 2012 and no measures taken to solve the problem.

“So how bad is that? You can control the brake control device from a distance from a distance, cost $ 500. You can close the brake failure or all national rail system that causes extracts ” Smith wrote in X.

According to Smith, there was a stalemat between ICS-Cert and American Railways (AAR).

In 2024, Smith brought the issue again with the agency. Smith wrote in X. May Aar still feel there is no big deal, but in April, the Industrial Group announced that it will eventually start To upgrade to the worn system in 2026.

Citizen, Chris Butera, the director’s assistant director’s office, has lowered any current risks in a statement sent from the EOT vulnerabilities to the gizmodo.

“Eot) and the head (Eot) and heading (Eot) and the hood (hot) are understood by the stakeholders of the railway sector for ten years,” Bertera said. “A danger actor to exploit this issue, the railway, which restricts the expediency of widespread exploitation, without a railway knowledge and specialized equipment, especially without being distributed in the United States

Butera added that CISA works with reduction strategies with industrial partners and confirmed that there was an amendment on the road.

Aar did not respond immediately to a survey for Gizmodo’s comment.