cancel
Showing results for 
Search instead for 
Did you mean: 

Patch your Chrysler or Jeep

New Member

Patch your Chrysler or Jeep

From Fox News online cars are way to technical now days!!!

Fiat Chrysler last week quietly issued a software patch for critical security vulnerabilities related to its Uconnect vehicle-connectivity system. The vulnerablities were dramatically detailed in a Wired story that was posted Tuesday.

In the Wired piece, two "white hat" hackers remotely connected to a Jeep Cherokee as a reporter drove it down a Missouri freeway. They made the radio blast at full volume and turned on the windshield wipers, but also cut off the transmission as a truck approached and, later, disconnected the brakes, sending the Cherokee into a ditch.

Owners of 2013, 2014 and 2015 models of Chrysler vehicles can download the new software update onto a USB stick, which then can be plugged into the car. Chrysler dealers will also install the update for free.

MORE: Meet the Hackers Making Your Connected Car Safer

It took hackers Charlie Miller and Chris Valasek nearly a year to discover and exploit the Uconnect flaw, of which they plan to provide more details at next month's Black Hat security conference in Las Vegas. The flaw let them remotely install a malicious firmware update that gave them control of the vehicle.

Perhaps even more frighteningly, the pair found that any phone on the Sprint cellular network could be used to find and track any vehicle using Uconnect, anywhere in the country. Wired reporter Andy Greenberg watched Miller track a Dodge Ram in Texas, a Jeep Cherokee in California and a Dodge Durango in Michigan.

"When I saw we could do it anywhere, over the Internet, I freaked out," Valasek told Wired. "That's a vehicle on a highway in the middle of the country. Car hacking got real, right then."

In a Tweet this morning, Miller said he and Valasek had notified Chrysler of the flaw in October.

Owners of recent-year Chrysler vehicles should go to http://www.driveuconnect.com/software-update/ to type in their Vehicle Identification Number (VIN) and see whether their vehicle needs the update. From there, the site will provide instructions on how to download and install the software patch.


Makes me glad I drive my 86 Toyota 4X4 Hilux it is far from connected.

10 REPLIES 10
Moderator
Moderator

Re: Patch your Chrysler or Jeep

Hi Gary,

Interesting article, thanks for sharing! Yes, more and more things are getting computerized and connected, so just like your home computers, be sure they have the latest firmware/software updates.

Thanks,
Liz
Please create a new thread in the community if you have a question or need help. Unsolicited Private Messages may not get replies.
New Member

Re: Patch your Chrysler or Jeep

Yep when I first started working on Cars for a living they had a distributor, (with contact points, a condenser,) a ignition coil, wires, and spark plugs, that was the entire ignition system.
Assistant Professor

Re: Patch your Chrysler or Jeep

Neither of my older vehicles have Bluetooth, WiFi or any other wireless capability. Hopefully safe for now. This is scary stuff though as the "other guy" might have all the newer connectivity features and we all share the same roads.
New Member

Re: Patch your Chrysler or Jeep

With the Drive By Wire throttle systems and computerized brakes, steering, and air bag control just imagine.  Speed up to 100mph or more lock out Brakes, and Steering, disable Airbag and seatbelt functions, a sharp left turn into oncoming traffic.  That is some scary stuff manufacturers are going to far relying on electronics. These system can and will fail I know I made a good living fixing them and teaching others how to fix them.
New Member

Re: Patch your Chrysler or Jeep

All I can say is: WOW; just "WOW"!!
Honorary Alumnus

Re: Patch your Chrysler or Jeep

Wow is right !
I have a new truck and a new car .....
It took a while to get used to the idea that the easiest way to change radio stations was to just talk to the truck.
Associate Professor

Re: Patch your Chrysler or Jeep

Assistant Professor

Re: Patch your Chrysler or Jeep

You might not be alone in your connected car even when you think so. Are those three hackers?  Smiley Sad

Advanced Tutor

Re: Patch your Chrysler or Jeep

Who is in control now?