Notices
JK Electrical, Lighting & Sound Systems Bulletin board forum regarding topics such as stereo head units, CD players, MP3 players, speaker systems, amplifiers, hardmounted GPS devices, computers, headlight upgrades, fog lights, off-road lights, general wiring and anti-theft devices.

Uconnect Exploit Posted on Wired

Thread Tools
 
Old 07-21-2015, 06:24 AM
  #1  
JK Super Freak
Thread Starter
 
Skippman's Avatar
 
Join Date: Nov 2008
Location: St. Louis, MO
Posts: 1,680
Received 5 Likes on 5 Posts
Default Uconnect Exploit Posted on Wired

As frightening as this sounds apparently there's an exploit possible with the Uconnect system on 2013 and newer systems that can allow a hacker to take control of your vehicle remotely. This issue is known by Fiat Chrysler and a firmware patch is available to prevent the exploit. I just read about this on Wired and figured I should share it with the community.
Old 07-21-2015, 07:33 AM
  #2  
JK Enthusiast
 
mattfl's Avatar
 
Join Date: Jul 2012
Location: DeBary, FL
Posts: 382
Likes: 0
Received 0 Likes on 0 Posts
Default

Was just coming here to post this exact thing.

This should be on the front page of the website, not some garbage about floyd spending who cares how much to trash his JK.
Old 07-21-2015, 07:50 AM
  #3  
JK Freak

 
urmyboyblue's Avatar
 
Join Date: Aug 2014
Location: Miramar, FL
Posts: 519
Likes: 0
Received 1 Like on 1 Post
Default

It's crazy but as I finish reading, I suspect that this would be for those with WiFi enabled systems which fortunate for us, the JK doesn't offer it unless you purchase a different system. I believe you need to have an 8.4A/AN for this to really affect you.

As an Edit: I'm not downplaying the fact that the exploit is dangerous...Just hoping to quell fears that people may have as I've yet to see the headunit listed in the article.

Last edited by urmyboyblue; 07-21-2015 at 07:54 AM.
Old 07-21-2015, 08:56 AM
  #4  
JK Newbie
 
tandem's Avatar
 
Join Date: May 2015
Location: Pittsburgh PA
Posts: 87
Likes: 0
Received 0 Likes on 0 Posts
Default

Awesome, guess my wife's KL is gonna have to go in for an update...
Old 07-21-2015, 10:37 AM
  #5  
JK Enthusiast
 
mattfl's Avatar
 
Join Date: Jul 2012
Location: DeBary, FL
Posts: 382
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by urmyboyblue
It's crazy but as I finish reading, I suspect that this would be for those with WiFi enabled systems which fortunate for us, the JK doesn't offer it unless you purchase a different system. I believe you need to have an 8.4A/AN for this to really affect you.

As an Edit: I'm not downplaying the fact that the exploit is dangerous...Just hoping to quell fears that people may have as I've yet to see the headunit listed in the article.
Incorrect, this operates on the Uconnects cellular signal.


And thanks to one vulnerable element, which Miller and Valasek won’t identify until their Black Hat talk, Uconnect’s cellular connection also lets anyone who knows the car’s IP address gain access from anywhere in the country. “From an attacker’s perspective, it’s a super nice vulnerability,” Miller says.

It operates on the cellular connection.

This article from Forbes says vehicles from 2013 and up are affected

Jeep Owners Urged To Update Cars To Stop Hackers Taking Them Off The Road - Forbes
Old 07-21-2015, 11:35 AM
  #6  
JK Freak

 
urmyboyblue's Avatar
 
Join Date: Aug 2014
Location: Miramar, FL
Posts: 519
Likes: 0
Received 1 Like on 1 Post
Default

Originally Posted by mattfl
Incorrect, this operates on the Uconnects cellular signal.


And thanks to one vulnerable element, which Miller and Valasek won’t identify until their Black Hat talk, Uconnect’s cellular connection also lets anyone who knows the car’s IP address gain access from anywhere in the country. “From an attacker’s perspective, it’s a super nice vulnerability,” Miller says.

It operates on the cellular connection.

This article from Forbes says vehicles from 2013 and up are affected

Jeep Owners Urged To Update Cars To Stop Hackers Taking Them Off The Road - Forbes
Maybe I misspoke and used WiFi incorrectly...But do all Uconnect's have cellular? Uconnect® Access | The next generation of connectivity has arrived

I'm just trying to understand because I'm definitely no security expert but I think it's only those I mentioned that are cell capable.



Quick Reply: Uconnect Exploit Posted on Wired



All times are GMT -8. The time now is 06:49 PM.