Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of the VW Group with the same hardware) and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Id.3_firmware | Volkswagen | * | 3.2 (excluding) |