We Finance! 104548 Miles 2007 Chrysler Aspen Limited on 2040-cars

Auto blog

Feds fretting over remote hack of Jeep Cherokee

A cyber-security gap that allowed for the remote hacking of a Jeep Cherokee has federal officials concerned. An associate administrator with the National Highway Traffic Safety Administration said Thursday that news of the breach conducted by researchers Chris Valasek and Charlie Miller had "floated around the entire federal government." "The Homeland Security folks sent out broadcasts that, 'Here's an issue that needs to be addressed,'" said Nathaniel Beuse, an associate administrator with the National Highway Traffic Safety Administration. Valasek and Miller commandeered remote control of the Cherokee through a security flaw in the cellular connection to the car's Uconnect infotainment system. From his Pittsburgh home, Valasek manipulated critical safety inputs, such as transmission function, on Miller's Jeep as he drove along a highway near St. Louis, MO. The scope of the remote breach is believed to be the first of its kind. The prominent cyber-security researchers needed no prior access to the vehicle to perform the hack, and the scope of the remote breach is believed to be the first of its kind. A NHTSA spokesperson said the agency's cyber-security staff members are "putting their expertise to work assessing this threat and the response, and we will take action if we determine it's necessary to protect safety." A Homeland Security spokesperson referred questions about the hack to Chrysler. Fiat Chrysler Automobiles has already been the subject of a federal hearing this month, in which officials scrutinized whether the company had adequately fixed recalled vehicles and repeatedly failed to notify the government about defects. But cyber-security concerns are a new and different species for the regulatory agency. Only hours before the Jeep hack was announced by Wired magazine earlier this week, NHTSA administrator Dr. Mark Rosekind said hacking vulnerabilities were a threat to privacy, safety, and the public's trust with new connected and autonomous technologies that allow vehicles to communicate. NHTSA outlined its response to the cyber-security challenges facing the industry in a report issued Tuesday. In it, the agency summarized its best practices for thwarting attacks and said it will analyze possible real-time infiltration responses. But the agency's ability to handle hackers may only go so far.

How to update and secure a vulnerable Chrysler Uconnect system

If you own one of the 1.4 million vehicles affected by the recent Chrysler software recall, you may want to watch this video. In it, we explain how to get the latest infotainment software loaded onto the 8.4-inch Uconnect system. The recall was a response to the findings of researchers who were able to hack into and remotely control a 2014 Jeep Cherokee through its cellular connection. Although Fiat Chrysler has worked with Sprint to plug most of the holes on the carrier side, there are still some vulnerabilities that only this latest software version can patch. Owners have three options to get the update: download it now, wait for a USB stick in the mail, or take the vehicle to an FCA dealer. Chrysler will be sending USB sticks loaded with the software update to customers. Anyone with an internet connection and a USB stick of their own with at least 4 GB capacity can speed things up by downloading the patch from the Uconnect website. We cover that process from start to finish in the video, with the final portion still applicable to those using the FCA-supplied USB stick. If after watching this you still don't want to tackle the patch yourself, you can take your vehicle to the dealer to have it done. Also note that this process is the same for all Uconnect updates, not just the one patching the exploits. Our demonstrator vehicle is a 2015 Ram 1500 pickup. The procedure should be very similar on other products with the 8.4-inch Uconnect system, with only the location of the USB port varying. Once you have the USB stick with the software on it – either after having downloaded it yourself or receiving it in the mail from Chrysler – the installation process is relatively simple. It takes about 15 minutes to perform the update; we edited out the wait in the video. To check whether or not your car's 8.4-inch Uconnect system is running the latest software, go to System Information on the touch screen's Settings page and look at Software Version. The update related to the recall is version 15.17.5. Related Video: Recalls Chrysler Dodge Jeep RAM Safety Technology Infotainment Videos Original Video hacking

November U.S. new car sales mixed as automakers deepen discounts

DETROIT — Major automakers posted mixed U.S. November new vehicle sales on Friday and predicted a competitive December as they rushed to sell vehicles and boost their numbers before 2017 ends. Automakers are trying to sell down 2017 model-year vehicles, offering high discounts to consumers as the year-end nears. In 2016, the industry reported record annual sales of 17.55 million units. According to consultancies J.D. Power and LMC, discounts have been above 10 percent of the average transaction price for 16 of the past 17 months, a level experts say is unhealthy and unsustainable. The November sales results come as the National Automobile Dealers Association said on Friday it expects new vehicle sales to decline to 16.7 million units in 2018, after dropping to 17.1 million for the full year in 2017. If that forecast comes true, the race to move new vehicles off dealers' lots will only intensify next year. Brandon Mason, a director at PwC's automotive practice, said a worrying trend for the industry was a rising number of subprime loans. He said subprime levels are at just over 20 percent of originations, against more than 30 percent prior to the Great Recession, but recent increases remain a concern. "That's a bit of a red flag," Mason said. "It's something to keep an eye on as we move into 2018." November results by automaker: General Motors: Sales fell 2.9 percent, with sales to consumers flat against the same month in 2016. Much of the decrease was driven by lower fleet sales. GM said strong SUV and crossover sales pushed its average transaction price for the month above $37,000 for the first time. The level of unsold cars, which has been a concern for analysts and the industry, rose slightly to 83 days' supply, from 80 days at the end of October. "More vehicles are sold in December than any other month, and we are very well positioned because we have momentum in so many segments, but especially in crossovers," said Kurt McNeil, U.S. vice president of sales operations. Fiat Chrysler Automobiles: Fleet sales are low-margin, and FCA in particular has targeted a significant reduction in this type of sale in 2017. It posted a 4 percent overall decrease in sales for November, but fleet sales were down 25 percent while sales to consumers were up 2 percent on the year. Ford: The No. 2 U.S. automaker reported a 6.7 percent increase for the month, with fleet sales up nearly 26 percent and retail sales 1.3 percent higher than in November 2016.