A study conducted by Positive Technologies says that in the implementation of mobile networks of the fourth generation (4G / LTE) there are fundamental security problems that can become an obstacle to the introduction of "smart" city systems.

The concept of a smart city includes the use of intelligent traffic lights and electronic road signs connected to the network of information panels, lighting systems of a new generation, etc.. These elements are now massively connected to 4G networks, and in the future they will exchange data and through the services of 5G.

Positive Technologies points to the security problems of the 4G core, known as the Evolved Packet Core (EPC). And a similar problem can affect and prospective 5G-networks.

The described technique of exploitation of vulnerabilities is based on the shortcomings of the GPRS (GPRS Tunneling Protocol) protocol and does not require an intruder of hard-to-access tools or a high level of skill. It is enough for an attacker to have a laptop, a freely distributable distro for penetration tests and basic programming skills.

Identified vulnerabilities are dangerous for connected to cellular networks of industrial Internet devices (IIoT), self-controlled vehicles and other IoT-objects.

Theoretically, attackers can provoke malfunctions in the work of "smart" traffic lights, disable one or many subscribers, intercept Internet traffic and SMS messages, disable the operator's equipment and perform other illegitimate actions.

Such attacks can be implemented both by employees of almost any telecom operator, and external attackers who have access to the operator's infrastructure. In some cases, attacks are possible even from mobile phones of subscribers.