Hackers wirelessly disable a Jeep Cherokee from 10 miles away with Uconnect

2015 Jeep Cherokee
The thought of “hackers” being able to shut down cars was confined to the hyperbolic ranting of paranoid technophobes just a few years ago. But with digital control now woven into nearly every automotive system, from in-dash entertainment to engine and braking control, the door for exploitation is open wide. And two software engineers just barged right through it, bringing a Jeep Cherokee to a dead stop right from the comfort of their living room.

Charlie Miller and Chris Valasek reached out to Wired writer Andy Greenberg to demonstrate how in-car connectivity can leave vehicles vulnerable to exploits beyond just messing with the radio. The duo discovered that Uconnect, the cellular-based infotainment system in Fiat-Chrysler vehicles, has a vulnerability that allows unprecedented access to the vehicle.

Anyone with the proper knowhow, software, and the vehicle’s IP address can exploit this and engage in a multitude of attacks. From a laptop miles away, the duo can take over the entertainment system, cranking the radio volume up and displaying images on the dash-mounted LED interface screen. They can even control the wipers and influence the digital gauge cluster.

uconnect-press
FCA’s Uconnect interface

But things get more serious: The engineers can totally kill the engine at slow speeds, or shift the transmission to neutral and leave the engine to rev helplessly, halting the Jeep used in the demonstration. The Jeep Cherokee has an available park-assist system which was also fair game for hacking. Normally, sensors guide servos in the steering wheel into a selected parking spot, but when broken into, the engineers could also take hold of that system too, essentially driving the car themselves. Fortunately for owners, that particular trick seems to work only when the car is in reverse. For now, anyway.

“I’d just stomp on the brakes and get out,” you might say, but the hackers are a step ahead of you there, too. Not only can they engage the door locks, but they can remotely kill the brakes, taking that last shred of control away from the driver.

Miller and Valasek have notified Fiat Chrysler Automobiles (FCA) of the Uconnect vulnerability, and the manufacturer pledges to issue a patch to hopefully plug the hole. They also stress that this is a larger issue all automakers need to be aware of, particularly with the growing trend toward semi-to-fully autonomous systems being developed in passenger cars. Taking control of a car might be the more extreme result of this security hole, but possibly more scary is what can be done without the driver being aware. Breaking into the car’s system reveals the vehicle’s GPS location, as well as the VIN and other user data that could be used in nefarious ways.

“If consumers don’t realize this is an issue, they should, and they should start complaining to carmakers,” Miller says. “This might be the kind of software bug most likely to kill someone.”

Emerging Tech

Descending at an angle could be key to landing heavier craft on Mars

Landing on Mars is a challenge: The heavier the craft, the more difficult a safe landing becomes. Scientists propose using retropropulsion engines and angling the craft to create a pressure differential to land heavier crafts in the future.
Emerging Tech

Photosynthesizing artificial leaf may be the air-cleaning tool we’ve dreamed of

Engineers from the University of Illinois at Chicago have invented an artificial leaf which could both clean up our air and provide a cost-effective type of fuel. Here's how it works.
Cars

Volkswagen’s hot-rodded T-Roc R is ready to shred its tires to confetti

Volkswagen released a teaser sketch to preview a hot-rodded SUV named T-Roc R. Insiders suggest it will be closely related to the mighty Golf R, meaning it will pack a turbocharged, 2.0-liter four-cylinder engine rated at about 300…
Emerging Tech

U.K. company sets a record for world’s largest 3D-printed rocket engine

U.K. startup Orbex has unveiled the world’s largest 3D-printed rocket engine. It's up to 30 percent lighter and 20 percent more efficient than other similarly sized rockets. Here's how it will be used.
Cars

The hottest of all Mini hatches is coming with a Batman-approved design

The Mini John Cooper Works GP concept first seen at the 2017 Frankfurt Motor Show will go into production in 2020, Mini has confirmed. The John Cooper Works GP is the ultimate performance version of the Mini Cooper.
Cars

Report: Amazon and General Motors may invest in electric pickup company Rivian

General Motors and Amazon may invest between $1 billion to $2 billion for minority stakes in U.S. startup Rivian, an all-electric truck company, Reuters reports. Rivian introduced the R1T pickup at the 2018 Los Angeles Auto show.
Cars

Ford F-150 recall: Fault could cause vehicle to downshift into first gear

Ford is recalling 1.48 million F-150 vehicles over a potential fault that could cause it to suddenly downshift into first gear. The automaker said it's currently aware of five accidents related to the issue.
Cars

Honda’s Urban EV is shaping up to be a high-tech, high-style electric city car

Honda will travel to the 2019 Geneva Auto Show to unveil a close-to-production prototype that previews an adorable, city-friendly electric car. The Urban EV will offer about 155 miles of range, and its interior is a tech lover's dream come…
Cars

Audi’s Geneva-bound Q4 E-Tron concept will give us a glimpse of the future

Audi has released a trio of teaser sketches to preview the Q4 E-Tron concept. Scheduled to make its debut at the 2019 Geneva Auto Show, the design study takes the form of an electric SUV with a muscular design and a tech-filled interior.
Cars

Tesla’s Dog Mode lets good Samaritans know that Fido’s A-OK

Tesla's latest over-the-air software update adds two features called Sentry Mode and Dog Mode. Sentry Mode records footage and alerts the owner if someone breaks in, while Dog Mode runs the A/C so owners can safely keep their dogs in their…
Cars

Rock out in the carpool lane with Singing Machine’s Carpool Karaoke microphone

Carpool Karaoke fans can count down the days till summer. That's when Singing Machine's Carpool Karaoke microphone will be available. Connect the Carpool Karaoke Mic to your car radio to make your next road trip a mobile karaoke party.
Cars

Bentley Bentayga Speed surpasses Lamborghini Urus as world’s fastest SUV

The Bentley Bentayga Speed has wrested the title of world's fastest SUV from its cousin, the Lamborghini Urus. But the Bentley is just 1 mph faster than the Lamborghini. It requires 626 horsepower to achieve that top speed.
Emerging Tech

With CabinSense, cars will soon know who’s riding in them and respond accordingly

What if your car could know who's riding in it and customize the entertainment and safety options accordingly? That’s what's promised by the new CabinSense in-car Occupancy Monitoring System.
Outdoors

General Motors cycles into a new market with its first-ever ebikes

When General Motors launched a public campaign last year to name its new ebike brand, many wondered if Bikey McBikeface might win out. But it didn't. Instead, it's called Arīv, and the two bikes are up for pre-order this week.