Critical vulnerabilities affecting Chrysler, Dodge, Jeep, and Ram models.
Connectikpeople.co recalls that, a vulnerability affecting the Uconnect
software from FCA has been reported. Exploitation of this vulnerability may
allow an unauthorized user to take remote control of an affected vehicle, but
the attack requires access to Sprint's cellular network, which connects FCA
vehicles to the Internet. Sprint has blocked the port used for attacks.
FCA and the National Highway
Transportation Safety Administration (NHTSA) have also initiated a safety
recall for all potentially affected Chrysler, Dodge, Jeep, and Ram models. See
the NHTSA
recall announcement for a complete list.
So, Connectikpeople.co recommends that users review ICS Alert 15-203-01 and Vulnerability Note VU#819439 for more information. Uconnect users are encouraged to review the NHTSA
recall announcement and apply the software
update.