Can traffic lights be hacked?

In recent days, a video has been circulating on social media showing an Audi car causing traffic lights to flicker erratically wherever it goes, leading to suspicions that the car is equipped with a device that can interfere with traffic lights.

A traffic light system in the Netherlands - Photo: DEMANA

The incident is currently being investigated by the authorities. However, experts in various countries have discovered technical vulnerabilities that allow traffic light systems to be hacked and remotely interfered with.

False signals 'trick' traffic lights.

In October 2024, the Dutch news channel RTL Nieuws reported that tens of thousands of traffic lights in the Netherlands could be hacked and remotely controlled.

In this country, when police, ambulances, or fire trucks need to move urgently, the traffic light system has a feature that switches to green to give them priority. Some public transport vehicles may also use this system.

However, a hacker named Alwin Peppels discovered the vulnerability while studying the system connecting traffic lights to emergency services.

Alwin Peppels told RTL Nieuws that hackers could easily change tens of thousands of traffic lights installed at thousands of intersections in the Netherlands with just the push of a button. They could even do this successfully from a distance of a few kilometers.

"Traffic lights are part of our critical infrastructure and are frequently targeted by those with malicious intent," Peppels said.

According to Peppels, to fix the problem, the traffic lights need to be physically replaced. Road transport authorities are working on this solution, but it is expected to take at least until 2030.

A traffic light for cyclists in the Netherlands - Photo: THE WIRED

Also in the Netherlands in 2020, The Wired reported that researchers Wesley Neelen and Rik van Duijn discovered a serious flaw in the smart traffic light system deployed in at least 10 cities.

These systems utilize mobile applications such as Schwung and CrossCycle to improve traffic flow for cyclists by automatically switching traffic lights to green when they approach an intersection.

However, research shows that this system can be easily exploited. By reverse-engineering the application's source code, researchers discovered how traffic lights respond to data packets containing information about vehicle location and movement (CAM).

They demonstrated that it is possible to create fake CAMs, simulating the appearance of non-existent cyclists. This allowed them to remotely control traffic lights, even from a distance of several kilometers.

False signals can cause traffic lights to change color arbitrarily, disrupting traffic flow and delaying other vehicles. This poses a potential safety risk if exploited for malicious purposes.

Bypassing security layers

Some technology experts warn that some traffic lights in the US may be hacked - Photo: RICHARD NEWSTEAD

In July 2024, the technology news site TechCrunch reported that cybersecurity expert Andrew Lemon of Red Threat had discovered a serious vulnerability in the Intelight X-1 traffic light control device, commonly used to manage traffic signals at intersections.

Lemon discovered that the Inlight X-1 device's web interface didn't require authentication. By simply accessing a specific URL, anyone could bypass security layers to change settings without logging in.

Thus, with unauthorized access, an attacker could manipulate traffic light timings, extending the green light duration in one direction and shortening it in others.

Lemon emphasized that although safety mechanisms prevent the green light from turning on simultaneously in all directions, changes in signal timing can still cause serious congestion and increase the risk of traffic accidents.

Traffic lights at Q-Free - Photo: TRAFFICTECHNOLOGYTODAY

After receiving the report, Inlight's parent company, Q-Free, issued a legal warning, stating that the Inlight X-1 device was obsolete and no longer in production.

In addition to Intelight, Lemon also discovered that control devices from the manufacturer Econolite also had a similar vulnerability due to the use of the NTCIP protocol – an industry standard with many security weaknesses. These devices could be exploited to alter signal sequences or simultaneously activate flashing lights at intersections, leading to traffic chaos.

The incident underscores the importance of securing critical infrastructure systems. Manufacturers and authorities need to ensure that traffic control devices are equipped with robust authentication protocols and are not exposed to insecure internet networks.

In addition, regular security checks and timely updates are essential to protect systems against increasingly sophisticated cyber threats.

Regarding the video showing an Audi car driving through traffic lights that turned green, a representative from the Traffic Police and Public Order Team of Thu Duc City Police Department told Tuoi Tre Online on January 4th that they are coordinating with relevant units and agencies to determine whether the video is authentic or edited, as well as whether there is a possibility of equipment interfering with traffic lights, and will provide further information later.

On the same day, Mr. Luu Van Tan, director of the Thu Duc Technical Infrastructure Development Center, said that immediately after learning about the incident spreading on social media, the center sent staff to the traffic light locations under its management to conduct a comprehensive inspection. The inspection revealed that all traffic lights were functioning normally and there were no technical faults.

Source: https://tuoitre.vn/den-giao-thong-co-the-bi-hack-khong-20250104220656294.htm