2014 Jeep Wrangler Unlimited Sport on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Jeep and Ram diesel owners get $3,075 in lawsuit settlement

Owners of certain Ram 1500 and Jeep Grand Cherokees equipped with diesel engines will get up to $3,075 in compensation for repairs under a settlement of a class-action lawsuit against Fiat Chrysler over illegal emissions-cheating software. The roughly $800 million settlement was first announced in January and approved by a federal judge in California last week, according to Consumer Reports. The affected vehicles are 2014 to 2016 Ram 1500 pickup trucks and Jeep Grand Cherokee SUVs equipped with 3.0-liter EcoDiesel V6 engines. FCA will update the emissions control software, provide an extended warranty covering up to 10 years or 120,000 miles, and provide cash compensation. Eligible owners will get as much as $3,075, while eligible lessees, former lease holders and former owners will get up to $990, and partial owners will get up to $2,460. FCA has established an EcoDiesel Settlement website where affected owners can find more information on how to submit and track a claim and sign up for updates. Customers with questions can also call 833-280-4748. Vehicle owners will have 21 months to submit a claim, with a deadline of Feb. 3, 2021, and two years to complete the repair and receive compensation for it. Former owners and lease holders must submit claims by Aug. 1, 2019. The EPA in early 2017 issued a notice of violation to FCA after Jeep and Ram installed eight emissions control devices on diesel vehicles. FCA's settlement includes $311 million in total civil penalties to U.S. and California regulators, up to $280 million to resolve claims from diesel owners, $105 million in extended warranties, $72.5 million in state civil penalties and $33.5 million in payments to California for excess emissions and to resolve consumer claims. Auto supplier Robert Bosch GmbH, which provided emissions control software, is paying $27.5 million to resolve claims, plus $103.5 million to settle claims with 47 states. The federal court also approved consent decrees between FCA, the EPA and the California Air Resources Board, plus agreements with all 50 stats and the U.S. Customs and Border Protection. In a statement, FCA said, "The settlements contain no findings of wrongdoing, nor admission of any wrongdoing, by FCA US" and added that the software fixes will have no affect on average fuel economy, performance or other characteristics of the vehicles.

Jeep Patriot replacement adopts tiny Grand Cherokee styling

After almost a year out of the spotlight, we've finally snagged our second set of images of Jeep's new CUV. Set to replace both the Patriot and Compass, these latest images reinforce what we originally thought about Jeep's newest model – it's a baby Grand Cherokee. These 15 images provide the best look yet at the new sheetmetal, details, and interior. Starting with the skin, it's like Jeep's designers scaled down the Grand Cherokee's profile to fit on the new crossover's stretched Renegade platform. The headlights, grille, and taillights looked like shrunken items from Jeep's flagship crossover, too. This is good news – even after its 2011 facelift the Compass was a homely little thing, and the Patriot was boxy at a time when CUVs were going for smoother, more aerodynamic lines. Jeep's new CUV is avoiding those mistakes by aping one of the company's most popular designs. Only the driver's seat, steering wheel, and center stack appear in the interior images, so we can't tell how the stretched chassis impacts rear-seat legroom compared to the Renegade/Fiat 500X. But in front, it looks like a Jeep – FCA's corporate steering wheel and HVAC controls are present and accounted for, but the usual touchscreen display looks bigger the expected 8.4-inch unit. That could just be the camera angle playing tricks on our eyes. We can't make any judgments about the material choices, but we'd expect quality to be on par with the larger Cherokee. Under hood, our spies report that FCA's nine-speed automatic will be the only transmission choice. FCA will call on its new 2.0-liter, Hurricane four-cylinder engine, the spies claim, but we also expect the less powerful 2.4-liter, four-cylinder from the Renegade and Cherokee. Apparently, production will begin by the end of the year. Short of a shotgun launch immediately after a Detroit debut, that virtually guarantees a debut in Los Angeles (or possibly Paris). Related Video: Featured Gallery Jeep C-Segment CUV: Spy Shots View 15 Photos Image Credit: CarPix Spy Photos Jeep Crossover Off-Road Vehicles jeep compass jeep patriot