I want to know the answer to the following question:
Assuming access has been gained to the car's internal controller area network, what is it possible to do?
All the background I'm provided with is that "Researchers in 2011 were even able to use a malicious compact disc in a car's stereo system as a successful attack vector, and cars with built-in voice recognition or remote assistance features have onboard microphones which could be used for eavesdropping.". Is that enough to answer the question?