A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices

Researchers at the University of Birmingham and Fuzzware discovered a vulnerability in cellular IoT devices that allows a malicious SIM card to execute commands on the device. The vulnerability stems from a SIM card's ability to issue proactive commands to the modem, bypassing standard security measures. Nine devices, primarily using Quectel modules, were found to accept these commands, including an Autel EV charger and three OPPO phones. While Qualcomm has built a hardened configuration, Quectel and other module makers haven't released public advisories or patches, leaving a significant number of vulnerable devices in use.