Security expert buys a Mitsubishi Outlander Hybrid to confirm Wi-Fi vulnerability

2016 Mitsubishi Outlander Sport
Connected car security concerns have become and will continue to be “a thing.” The latest issue, and one that deserves immediate notice, is about the Mitsubishi Outlander Hybrid SUV. A British security expert discovered a vulnerability in the Outlander’s onboard Wi-Fi almost by accident while waiting to pick up his kids after school, according to BBC News. As a result of his report and a demo to Mitsubishi, the company has advised owners to disable Wi-Fi in their vehicles until it figures out a fix.

Ken Munro was in his car when he noticed a Wi-Fi access point from a friend’s nearby Outlander. When Munro asked about it his friend explained how the system worked and what he could do with it from his cell phone. Munro tried the app and quickly found a troublesome vulnerability. So he got out of the app immediately.

What Munro did next isn’t what you would likely do, but he promptly bought an Outlander and took it to his company to check out the problem. What may seem like an overly cautious (not to mention expensive) reaction to a Wi-Fi weakness resulted in the manufacturer acknowledging the potential problem and recommending owners stop using Wi-Fi by de-registering their access points.

The issue Munro found was that remote commands sent to the Outlander go directly to the car’s access point, not through a third-party web server, which is the practice with most carmakers. Second, the access point name was distinct and could easily end up on websites that collect and display nearby access points. Munro and his colleagues used unnamed but “well-known techniques that let the researchers interpose themselves between car and owner and watch data as it flowed between the two.”

With access to the car’s system, anyone could flash the lights, drain the battery, and change other settings. The most disturbing finding, however, was the ability to disable the car’s alarm system. This could give thieves a chance to break in to steal the car’s contents, components, and possibly even the car itself.

Related: Driverless cars could be used for assassination, says Attorney General

“This hacking,” Mitsubishi acknowledged in a statement released to BBC News, “is a first for us as no other has been reported anywhere else in the world.” Mitsubishi recommended owners cancel the access point VIN registration via the smartphone app or with the car’s remote.

If you own a Mitsubishi Outlander Hybrid, there are three steps to be followed in order to delete the VIN registration. First, turn on the hazard lights. Second, within 30 seconds, and with the doors closed, press the Lock/Unlock button on the remote 10 times. That will put you in registration delete mode. Wait for the beeping to stop — if the system is registered there will be one beep with an additional beep for each device registered with the access point, so just wait. Then, within 5 minutes, and again with the doors closed and using the car remote, press the Lock/Unlock button 20 times. Those steps will de-register your car’s Wi-Fi system. Then wait until you get word that it’s OK to register it again after Mitsubishi figures out a solution.

This hasn’t been a great year for Mitsubishi with its admission of fuel economy test cheating and resulting slower sales. Hopefully, the company can resolve the Wi-Fi security issue quickly.

Smart Home

Here’s everything Amazon and its partners announced for Alexa at CES

Amazon Alexa is rocking CES 2019. After selling millions of Echo and Dot smart speakers during the 2018 holiday season, extending its reach everywhere, Amazon has announced a ton of new partnerships with device manufacturers.
Home Theater

The best movies on Netflix in December, from 'Buster Scruggs’ to 'Roma'

Save yourself from hours wasted scrolling through Netflix's massive library by checking out our picks for the streamer's best movies available right now, whether you're into explosive action, witty humor, or anything else.
Movies & TV

The best shows on Netflix, from 'Haunting of Hill House’ to ‘Norsemen’

Looking for a new show to binge? Lucky for you, we've curated a list of the best shows on Netflix, whether you're a fan of outlandish anime, dramatic period pieces, or shows that leave you questioning what lies beyond.
Gaming

Having problems with your Xbox One console? We have the solutions

The Xbox One has evolved over the years, but so have its problems. Thankfully, we have solutions for some of the console's most enduring problems, whether you're experiencing issues with connectivity or your discs.
Cars

The 8-seat, 3-row 2020 Telluride SUV is the biggest Kia ever

It's fitting that the 2020 Kia Telluride debuts at the 2019 Detroit Auto Show, as it was built specifically to meet U.S. buyers' insatiable demand for SUVs. Kia packed the eight-seat cabin with family-friendly tech as well.
Cars

Cadillac is finally ready to take on Tesla with its own electric car

At the 2019 Detroit Auto Show, Cadillac announced plans for its first electric car. The unnamed model will be a crossover, based on a new platform to be shared with other General Motors brands.
Cars

Peloton’s tech lets truckers play follow the leader to boost fuel economy

Peloton Technology can help semi trucks save fuel by running close together on the highway. Using short-range wireless communications, the trucks get a kind of super cruise control.
Cars

Move mountains with the 2019 Ram Heavy Duty and its 1,000 pound-feet of torque

Unveiled at the 2019 Detroit Auto Show, the 2019 Ram Heavy Duty pickup truck boasts 1,000 pound-feet of torque -- outgunning rival trucks from Ford and Chevrolet. The new Ram goes on sale later this year.
Cars

With 341 horsepower, the WRX STI S209 is the most powerful Subaru ever

The Subaru WRX STI S209 is the latest in a series of special editions that have never been sold in the United States before. The 341-horsepower pocket rocket debuts at the 2019 Detroit Auto Show.
Cars

China’s GAC Motor cruises into Detroit with all-electric Entranze concept

Chinese automaker GAC Motor brought its all-electric Entranze concept to the 2019 Detroit Auto Show. This is the third straight year that GAC has appeared in Detroit, and the company has established a design center in California.
Cars

2020 Ford Explorer branches out with sporty ST, efficiency-focused hybrid models

The 2020 Ford Explorer gets two variants never before seen on Ford's stalwart family hauler. The ST focuses on performance, while the hybrid aims for decent gas mileage. Both models will debut at the 2019 Detroit Auto Show.
Cars

Some of Volkswagen’s electric models will wear a ‘Made in the USA’ label

Confirming earlier rumors, Volkswagen has announced it will build electric cars in its Chattanooga, Tennessee, factory. The facility currently produces the Passat and the Atlas. Production will start in 2023, Digital Trends can reveal.
Cars

Infiniti previews its leap into one of the hottest industry segments

Infiniti will unveil the QX Inspiration concept at the 2019 Detroit Auto Show. The design study is an electric crossover shaped by Infiniti's newest design language that may point to a future production model.
Cars

Hyundai’s Veloster N hot hatchback will prove its mettle on the track

The Hyundai Veloster N will go racing to prove the credibility of Hyundai's new N performance division. Unveiled at the 2019 Detroit Auto Show, the Veloster N race car will compete in a class with other small cars.