Fiat Chrysler Issues Massive Recall For Vehicles At Risk Of Software Hack
DETROIT (WWJ) - Fiat Chrysler is recalling approximately 1.4 million vehicles in the U.S. that are vulnerable to being hacked and controlled by an outside source.
The fix is a response to a recent article in Wired magazine about two well-known hackers, Charlie Miller and Chris Valasek, who remotely took control of a Jeep Cherokee through its UConnect entertainment system. They were able to change the vehicle's speed and control the brakes, radio, windshield wipers and other features.
"The recall aligns with an ongoing software distribution that insulates connected vehicles from remote manipulation which, if unauthorized, constitutes criminal action," the company said in a statement.
MORE: Hackers Show Off How They Can Get Into Jeep's Electronics To Control Steering And Brakes Remotely
In addition, Chrysler has applied network-level security measures to prevent the type of remote manipulation demonstrated in the report. These measures – which required no customer or dealer actions – block remote access to certain vehicle systems and were fully tested and implemented within the cellular network on July 23, 2015.
Chrysler says it doesn't know of any hacking incidents outside the one described in the article. The company is also unaware of any injuries related to software exploitation.
Vehicles included in the recall are equipped with 8.4-inch touchscreens, including:
- 2013-2015 MY Dodge Viper specialty vehicles
- 2013-2015 Ram 1500, 2500 and 3500 pickups
- 2013-2015 Ram 3500, 4500, 5500 Chassis Cabs
- 2014-2015 Jeep Grand Cherokee and Cherokee SUVs
- 2014-2015 Dodge Durango SUVs
- 2015 MY Chrysler 200, Chrysler 300 and Dodge Charger sedans
- 2015 Dodge Challenger sports coupes
.
Customers affected by the recall will receive a USB device to upgrade vehicle software, which provides additional security features independent of the network-level measures.
Alternately, customers may visit driveuconnect.com/software-update to input their Vehicle Identification Numbers (VINs) and determine if their vehicles are included in the recall.
"The software manipulation addressed by this recall required unique and extensive technical knowledge, prolonged physical access to a subject vehicle and extended periods of time to write code," said Chrysler. "No defect has been found. FCA US is conducting this campaign out of an abundance of caution."
Customers are urged to acquire the software update. Those with questions or concerns may call the FCA US Customer Care Center at 1-800-853-1403.
