UConnect has been Hacked!!

[NorthTexasHemi]

Well it's that time of year again when people need to write papers for black hat conference and they have figured out how to hack UConnect and take over the vehicle.

New vulnerability lets attackers hijack Chrysler vehicles over the web | The Verge

Get the fix here:

Uconnect® Software Update - Update your Uconnect® System

 

[joshj84]

wow nice..

 

[QwikKota]

I never activated mine, am I ok?

 

[DERJ]

Here's the TSB for 2014: http://www.wk2jeeps.com/tsb/tsb_wk2_0807215.pdf

2015: http://www.wk2jeeps.com/tsb/tsb_wk2_0803115a.pdf

 

[Selcher]

Looks like I'll be doing another update when I get home...

 

[Will225]

Thanks for sharing! Now let me go grab this VIN number so I can see if I'm eligible.

 

[Neumie]

Why wouldn't you just take it to the dealer? Seems like a hassle?

 

[clh1220]

Saw that and doesn't look like anything to get too worried about. What's the odds.

 

[Hrolfr]

Beat me to it. Update your radios.... it is free and takes 20 minutes. Why take the chance..... It was announced at black hat so there are a lot of skilled folks that just want to try it to do it.

 

[Hrolfr]

I never activated mine, am I ok?

Nope do the update. It still pings back to the mopar servers.

Why wouldn't you just take it to the dealer? Seems like a hassle?

It take 20 mins tops.... download the file, launch the exe and set it to extract to a thumb drive, plug the drive into the truck, start truck, touch yes and it runs easy peasy....

 

[CuylerTech]

They said that what they publish to the public will be just enough to activate and control non necessary devices ie cant control driveline brakes ect. They wont publish the code to overwrite the firmware so everyone else will have to reverse engineer it. They will patch it so no worries.

 

[AzRamLover]

No one thinks about software security until there's a breach.

I've been trying to disable the cellular connection since day 1 of ownership for exactly this reason. I'm 90% of the way to the solution - will publish here and the other forum when done.

 

[nyciti]

Well I guess this is where all the guys who did the 8.4 swap win, since we have no connectivity no access to it anyway....but I will do the update anyway why not.

 

[bobbo7915]

i did the update last night, have a MY15 RA4....my FM reception is way better, sirius album shows up right away now without a big delay. seems like a solid improvement to me

 

[Lttlcheeze]

Just found an article on this, glad the info is already posted up here on the forum.

Hackers Remotely Kill a Jeep on the Highway

 

[stoney]

i did the update last night, have a MY15 RA4....my FM reception is way better, sirius album shows up right away now without a big delay. seems like a solid improvement to me

My FM reception has been ****** since day one, which I thought was kind of odd....I will do the update as well and see if it helps.

 

[joshjack]

Why wouldn't you just take it to the dealer? Seems like a hassle?

And chance them screwing something else up? I avoid going to the dealer at all costs...

Besides, you can do this in less time that it takes to drive to a dealer.

 

[Kap1]

So looks like only Uconnect 8 is affected?


Uconnect 5 is OK?

 

[QwikKota]

The download file is a .exe correct? This download program BS and browser compatibility is ******** and confusing. WTF is Akamai?

After downloading the file, when hovering the mouse over it the Company says: Igor Pavlov

Another wtf?

 

[Burla]

This needs to be in General discussion! I will start another thread over there to. Looks like the mods moved it. hey mods this is important, please move it back to general disc so everybody opens the thread.