From R155 4.3.1 "threats regarding back-end servers related to vehicles in the field" covers it? Of course the whole standard is still pretty focused on the on-vehicle side of things, but it certainly touches on it.

Surprised to see these even mentioned on HN. I've read R155 as part of my job and am responsible for implementing it.