2022 Jeep Cherokee Trailhawk 4x4 on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

10 Facts about the 2018 Jeep Wrangler

The 2018 Jeep Wrangler is here. It debuts this week at the Los Angeles Auto Show and it's going on sale in January. After years of anticipation, it's finally reality. Here's our complete First Look, but to break it down further, here's things you'll find curious, cool, absolutely necessary, or just plain interesting. – The 2018 Jeep Wrangler (JL) will be sold concurrently during 2018 as inventory is moved out. This means you might be able to get a decent deal on the outgoing model, the JK. It gets a little confusing since the JK and the JL will both be 2018 models, which suggests the JK sell-down might take awhile. Mike Manley, Jeep boss, defended the strategy during a briefing in Auburn Hills, and noted it's somewhat common across the industry. – The doors: They lift out and have handles so you don't drop them. There's also half-doors that will be offered in 2019. Doors weren't standard on Wranglers until the early 1980s. – There are multiple trims. The two-door comes in Sport, Sport S or Rubicon. The Unlimited is Sport, Sport S, Sahara or Rubicon. Expect more to come. – The EcoDiesel arrives in 2019. This could be interesting. Jeep says it's in response to consumer demand, and it could be a differentiator from the Ford Bronco or other utes looming on the horizon. The V6 is the same engine from the Ram and Jeep Grand Cherokee EcoDiesel models. In the Wrangler, it pumps out 260 horsepower and 442 pound-feet of torque. – The Sky One-Touch power top is cool. With a touch of a button, the canopy of the roof scrolls back. Perfect for the urban or actual jungle. It's offered on Rubicon and Sahara four-door variants. – What they didn't do: The speculation surrounding the Wrangler's future hit a fever pitch in 2015, and most of rumors didn't pan out. It's still built in Toledo, Ohio and it's still body on frame. – Some of the rumors were (kinda) on point. Aluminum was used, fairly extensively. The doors, door hinges and front fenders are aluminum. The rear swing gate is magnesium. No one was speculating on that one. – The badges are cool, and Wrangler enthusiasts will love them. There's one on the swing gate that harks back to the Willys predecessors and offers cool stats, like the fording depth of 30 inches. There's also a silhouette on the shifter and the steering wheel is meant to conjure the image of the Y-shaped ones on military vehicles. You kind of need to squint for that one, but there's plenty of other Easter Eggs.

FCA recalls 894k total vehicles worldwide in two campaigns

FCA is recalling a total of 893,698 vehicles worldwide in two campaigns to fix problems with inadvertent airbag deployment, failure of the anti-lock brakes, and stability control systems in the Jeep Grand Cherokee, Liberty, Dodge Journey, and Fiat Freemont. 559,703 of these vehicles are in the US. The larger recall affects 284,089 examples of the 2003 Jeep Liberty and 2004 Jeep Grand Cherokee, and there are also 13,411 of them in Canada, 6,277 in Mexico, and 48,212 outside the NAFTA region. Because of "electrical noise beyond the tolerance of the airbag electronic control module", part of that component can fail, according to the National Highway Traffic Safety Administration. This can cause the front and side airbags to deploy and the seatbelt pre-tensioners to activate inadvertently. FCA US has seven reports of alleged injuries from this problem. To fix the situation, the Jeeps need their Occupant Restraint Control modules replaced, as well as the front- and side-impact sensors. According to the NHTSA, the replacement parts won't be available until early 2016. Still, FCA US will advise owners about the problem in a letter by the end of December and will send a second notification when the components are ready. The second campaign affects 275,614 examples of the 2012-2015 Dodge Journey in the US; plus 78,148 of them in Canada, 36,471 in Mexico, and 151,476 left-hand drive units outside of NAFTA where it's sold as the Fiat Freemont. On these vehicles, water intrusion can disable the anti-lock brakes and electronic stability control, although a warning light often illuminates when this issue occurs, and the problem doesn't affect regular braking. There are also no reports of injuries or accidents. To fix the issue, dealers will seal the ABS wiring harness and will replace any already affected components as necessary, like the ABS module or the headlamp and dashboard wiring harness. Statement: Occupant Restraint Control Modules October 30, 2015 , Auburn Hills, Mich. - FCA US LLC is voluntarily recalling an estimated 284,089 older-model SUVs in the U.S. to replace their Occupant Restraint Control (ORC) modules and front and/or side-impact sensors, as required. Within this vehicle population, FCA US became aware of seven injuries caused by inadvertent air-bag deployments and advised NHTSA accordingly. The affected vehicles are not equipped with Takata Corp. air-bags. The Company is unaware of any related accidents.