Modern vessels and yachts are equiped with many communication systems and connected to Internet.
In this talk we will start with an brief overview about the different maritime navigation systems and how they interact. This is mandatory to understand how these systems exchange informations and where the attack vectors are.
We will have an closer look onto Maritime Internet Router and Satellite Internet communication systems.
I present backdoors in those systems up to CLI (command line) access.
From those, it is a short step into Backbone of vessels, nowadays based on NMEA0183 or the newer NMEA2000 (SeaTalk NG), which is electrical similar to CAN Bus.
NMEA Gateways connecting the Backbone of the Ship with the IP Network.
So we have an swimming IoT device with many attack vectors.
These vulnerabilities and how to access from there the NMEA (CAN) Bus will be shown in the presentation.
Targeting Yachts or large vessels would become a new threat and we will hear about more in the next years.