Investigations

Software security vulnerability

NHTSA Recall Query RQ15004 — closed, opened 2015-07-24 and involving the INTERNATIONAL INTERNATIONAL.

RQ15004 Recall Query Closed

Vehicle: INTERNATIONAL INTERNATIONAL View model page

NHTSA investigation RQ15004 is a Recall Query opened on 2015-07-24 and currently closed. The subject of record is INTERNATIONAL INTERNATIONAL, which places this file inside the Office of Defects Investigation queue for INTERNATIONAL. Latest activity on this investigation was logged on 2016-01-05 — NHTSA updates that field whenever an Information Request goes out, a supplement is filed, or a status change is recorded in the public docket.

A Recall Query like RQ15004 evaluates whether a previously issued recall is actually fixing the problem. NHTSA opens an RQ when owners continue to report the original defect after the recall remedy is installed, or when completion rates fall short of the agency's expectations for that risk tier.

Investigators summarized the matter as follows: "On July 23, 2015, Fiat Chrysler Automobiles (FCA) launched Safety Recall 15V-461 to remedy security vulnerabilities in approximately 1.4 million model year (MY) 2013 through 2015 vehicles equipped with Uconnect head unit..." Investigations are the early-warning layer of the federal auto-safety system, sitting upstream of formal recalls and defect orders. Whether this one closes without action or escalates into an Engineering Analysis, the full history stays in the ODI archive so researchers, litigators, and buyers can pull the paper trail at any time. Related INTERNATIONAL files, listed below, give context on whether this is an isolated concern or part of a broader pattern across the brand.

Status
Closed
Type
Recall Query
Opened
2015-07-24
Latest Activity
2016-01-05

Investigation Summary

On July 23, 2015, Fiat Chrysler Automobiles (FCA) launched Safety Recall 15V-461 to remedy security vulnerabilities in approximately 1.4 million model year (MY) 2013 through 2015 vehicles equipped with Uconnect head units (HU) 8.4A (RA3 radio) and 8.4AN (RA4 radio) manufactured by Harman International. On July 24, 2015, the Office of Defects Investigation (ODI) opened Recall Query, RQ 15-004, to investigate HU security vulnerabilities and remedy effectiveness in the recalled population and to determine whether similar units have been supplied for use in other FCA vehicles. In an August 11, 2015 letter, FCA submitted a second Part 573 safety recall report expanding the scope of the Uconnect RA4 model radio to include additional 7,810 MY 2015 Jeep Renegade vehicles manufactured from September 18, 2014 through June 25, 2015 (Recall 15V-508). Scope analysis indicated that Uconnect radios installed in FCA vehicles not included in recalls 15V-461 or 15V-508 (subject recalls) are not equipped with built-in cellular access or short range wireless communication features and, thus, do not contain the security vulnerabilities addressed by the subject recalls. SUBJECT VEHICLES: MY2014 through 2015 Dodge Durango, Jeep Grand Cherokee and Jeep Cherokee sport utility vehicles; MY2013 through 2015 Ram 1500, 2500, 3500 and 4500/5500 pickup trucks; MY2013 through 2015 Dodge Viper vehicles; and MY2015 Chrysler 200, 300, Jeep Renegade, Dodge Charger and Challenger vehicles. According to FCA, long and short range wireless vulnerabilities identified in the recalled vehicles could allow unauthorized third-party access to, and manipulation of, networked vehicle control systems. Successful exploitation of the vulnerabilities, coupled with reverse engineering of networked microprocessor control modules, could result in unauthorized manipulation of vehicle control systems. This unauthorized manipulation of vehicle controls and systems could expose the driver, vehicle occupants or other highway

About This Investigation Type

A Recall Query (RQ) evaluates the effectiveness of a previously issued recall. NHTSA opens an RQ when consumer complaints suggest that a recall remedy may not be adequately addressing the safety issue, or when the recall completion rate appears insufficient.

Other INTERNATIONAL Investigations

Data from NHTSA Office of Defects Investigation. Cross-references: NHTSA recall campaign API and NHTSA FARS where fatality records overlap. PlainCars does not rate or recommend vehicles. Learn more.