Fiat Chrysler recalls 1.4 million vehicles to install anti-hacking software

(July 25, 2015) AUBURN HILLS, Mich. — Less than a week after hackers remotely gained control of a Jeep Cherokee, Fiat Chrysler has issued a recall of 1.4 million vehicles to close a software loophole in the Internet-ready Uconnect radios. FCA says the recall aligns with an ongoing software distribution that insulates connected vehicles from remote manipulation, which, if unauthorized, constitutes criminal action.

The company says it has applied network-level security measures to prevent the type of remote manipulation demonstrated in a recent media report. These measures — which required no customer or dealer actions — block remote access to certain vehicle systems and were fully tested and implemented within the cellular network on July 23.

Affected are certain vehicles equipped with 8.4-inch touchscreens among the following vehicles:

    2013-2015 MY Dodge Viper specialty vehicles
    2013-2015 Ram 1500, 2500 and 3500 pickups
    2013-2015 Ram 3500, 4500, 5500 Chassis Cabs
    2014-2015 Jeep Grand Cherokee and Cherokee SUVs
    2014-2015 Dodge Durango SUVs
    2015 MY Chrysler 200, Chrysler 300 and Dodge Charger sedans
    2015 Dodge Challenger sports coupes

Customers affected by the recall will receive a USB device that they may use to upgrade vehicle software, which provides additional security features independent of the network-level measures. Alternately, customers may visit http://www.driveuconnect.com/software-update/ to input their Vehicle Identification Numbers (VINs) and determine if their vehicles are included in the recall.

"The security of FCA US customers is a top priority, as is retaining their confidence in the company’s products. Accordingly, FCA US has established a dedicated System Quality Engineering team focused on identifying and implementing best practices for software development and integration," the company said in a statement.

Last Monday professional hackers Charlie Miller and Chris Valasek took command of an unmodified 2014 Jeep Cherokee while it was being driven on a St. Louis highway by journalist Andy Greenberg. Working via laptop computers from home, the hackers blasted the Cherokee’s radio, turned on the wipers and a torrent of washer fluid and eventually shut off the Cherokee’s engine while it was traveling on the highway.

FCA said the software manipulation addressed by this recall required unique and extensive technical knowledge, prolonged physical access to a subject vehicle and extended periods of time to write code.

No defect has been found. FCA US is conducting this campaign out of an abundance of caution.

Customers are urged to acquire the software update. Those with questions or concerns may call the FCA US Customer Care Center at 1-800-853-1403.