Home / Latest recalls / 15V508

Jeep Renegade Recall 15V508: Radio Flaw Could Let Hackers Remotely Control Some Systems

NHTSA campaign 15V508, reported August 12, 2015, 7,810 vehicles potentially affected.

What this recall means for you

Certain 2015 Jeep Renegade vehicles built between September 2014 and June 2015 have radios with software vulnerabilities. These flaws can allow unauthorized third parties to access certain networked vehicle control systems.

If the vulnerability is exploited, someone could remotely modify and control some vehicle systems, which increases the risk of a crash. The manufacturer has already closed the open cellular connection that enabled this unauthorized access on affected vehicles, but this step may not be in place on every vehicle and does not address access by other means.

The repair is free. Owners will be mailed a USB drive with a software update that removes the vulnerability, or they can download the update from driveuconnect.com or take the vehicle to an authorized Chrysler dealer for immediate installation. Check your VIN for open recalls and contact Chrysler customer service at 1-800-853-1403 with questions.

Check whether this recall is open on your vehicle

The repair is normally free at an authorized dealer.

Official recall notice

Safety recall 15V508Chrysler (FCA US LLC)
Component
ELECTRICAL SYSTEM:CYBERSECURITY
Problem
Chrysler (FCA US LLC) is recalling certain model year 2015 Jeep Renegade vehicles manufactured September 18, 2014, to June 25, 2015. The affected vehicles are equipped with radios that have software vulnerabilities that can allow third-party access to certain networked vehicle control systems.
Risk
Exploitation of the software vulnerability may result in unauthorized remote modification and control of certain vehicle systems, increasing the risk of a crash.
Remedy
Chrysler will notify and mail affected owners a USB drive that includes a software update that eliminates the vulnerability, free of charge. Optionally, owners may download the update to their own USB drive from http://www.driveuconnect.com/software-update/ or take their vehicle to a Chrysler dealer for immediate installation. In an effort to mitigate the effects of this security vulnerability, Chrysler has had the wireless service provider close the open cellular connection to the vehicle that provided unauthorized access to the vehicle network. This measure may not have been implemented on all vehicles and does not address access by other means that will be remedied by the software update. The recall began on September 30, 2015. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is R45.
Notes
Owners may also contact the National Highway Traffic Safety Administration Vehicle Safety Hotline at 1-888-327-4236 (TTY 1-800-424-9153), or go to www.safercar.gov.

Affected vehicles

Jeep Renegade2015