← New search

2015 Chrysler 200

Owner reports · Recalls · Investigations

More warning signs than most 200 years

Owner complaints for the 2015 Chrysler 200 are substantially higher than the model-year median of 336.

About this comparison →

When problems were reported

Mileage at the reported incident

1,442 reports with mileage · 545 unknown

NHTSA’s mileage field refers to the reported incident, not necessarily the filing date. This shows report counts, not the likelihood of a failure.

What to inspect

Issues worth paying extra attention to based on owner reports.

  • Electrical System. Review the 752 owner reports in this category and discuss these concerns during a pre-purchase inspection. Read reports →
  • Power Train. Review the 693 owner reports in this category and discuss these concerns during a pre-purchase inspection. Read reports →
  • Engine. Review the 606 owner reports in this category and discuss these concerns during a pre-purchase inspection. Read reports →

NHTSA owner reports · September 18, 2026 snapshot.

99 crash reports24 fire reports50 injury reports

What owners actually said

1,987 reports
129,000 miles · Nov 27, 2019
Unknown Or Other

THE WHOLE CAR ( ELECTRICAL SYSTEM & ENGINE ) SHUT OFF WHILE I WAS DRIVE ( GEAR IN DRIVE AND FOOT ON GAS) ON A CITY STREET THIS IS THE 2ND TIME THE CAR HAS DONE THIS WITH IN THE MONTH ... I BOUGHT THE CAR 6 WEEKS AGO

NHTSA ODI #11282744

40,000 miles · Nov 26, 2019
Power Train

WHEN ACCELERATING OR COMING TO A STOP THE CAR WILL LUNGE FORWARD FORCEFULLY. SEEMS LIKE THERE ARE SEVERAL OWNERS WITH THE SAME ISSUE. HOW MANY TIMES THE THE ISSUE NEED TO BE REPORTED BEFORE ISSUING A RECALL AS THIS IS VERY UNSAFE

NHTSA ODI #11282460

87,500 miles · Nov 25, 2019
Electrical SystemPower Train

I'VE ONLY HAD MY CAR FOR LESS THAN 2 MONTHS NOW AND THE CAR IS NOT SWITCHING GEARS PROPERLY, THE CAR ALSO WILL NOT START SOMETIMES THE MESSAGE DISPLAYS THAT IT IS NOT IN PARK AND WILL NOT START FOR A WHILE. ON 11/22/2019 THE CAR WOULD NOT START AND IT ALSO WOULD NOT TURN OFF, IT WAS STUCK IN ACC AND ON MODE, IT TOOK ABOUT 3 HOUR…

Read full complaint

I'VE ONLY HAD MY CAR FOR LESS THAN 2 MONTHS NOW AND THE CAR IS NOT SWITCHING GEARS PROPERLY, THE CAR ALSO WILL NOT START SOMETIMES THE MESSAGE DISPLAYS THAT IT IS NOT IN PARK AND WILL NOT START FOR A WHILE. ON 11/22/2019 THE CAR WOULD NOT START AND IT ALSO WOULD NOT TURN OFF, IT WAS STUCK IN ACC AND ON MODE, IT TOOK ABOUT 3 HOURS TO GET THE CAR TO COMPLETELY SHUT DOWN. ALSO, WHILE I'M DRIVING WHEN IT ACTUALLY MOVES IT ACTS LIKE IT WANTS TO CUT OFF WHILE DRIVING ON THE STREETS.

NHTSA ODI #11282115

66,100 miles · Nov 22, 2019
Air BagsElectrical System

SERVICE AIR BAG SYSTEM NOTICE COMES ON, AS WELL WITH THE VEHICLE DRIVING GROGGY. DOES NOT HAVE PROPER THROTTLE RESPONSE, ENGINE SHUDDERS AND VIBRATES AS WELL WITH STALLING AT A RED LIGHT. ALL HAPPENS WHILE DRIVING AND SITTING STATIONARY.

NHTSA ODI #11281683

23,300 miles · Nov 21, 2019
Electrical SystemEngine

WHILE DRIVING MY VEHICLE STALLS OUT AND GIVES ME A MESSAGE ON THE CLUSTER TO, "SHIFT TO PARK TO START". WHEN I STOP THE VEHICLE AND SHIFT TO PARK I PRESS THE BUTTON TO START AND IT HESITATES AND SOMETIMES HAVE TO PRESS 3 OR 4 TIMES BEFORE IT STARTS. THEN I PRESS ON THE GAS WHILE IN PARK AND IT IS A VERY SLOW CLIMB IN THE RPMS. A…

Read full complaint

WHILE DRIVING MY VEHICLE STALLS OUT AND GIVES ME A MESSAGE ON THE CLUSTER TO, "SHIFT TO PARK TO START". WHEN I STOP THE VEHICLE AND SHIFT TO PARK I PRESS THE BUTTON TO START AND IT HESITATES AND SOMETIMES HAVE TO PRESS 3 OR 4 TIMES BEFORE IT STARTS. THEN I PRESS ON THE GAS WHILE IN PARK AND IT IS A VERY SLOW CLIMB IN THE RPMS. AFTER A FEW ATTEMPTS AT PRESSING THE GAS IT SEEMS TO BE OK. I THEN SHIFT INTO DRIVE AND IT MOVES A FEW FEET AND DOES THE SAME STALLING OUT AND ERROR MESSAGE ON THE CLUSTER. THIS HAS HAPPENED SEVERAL TIMES WHILE ON THE HIGHWAY, CITY STREETS AND SOMETIMES TURNING. I AM SCARED TO DRIVE THIS VEHICLE AND SEEING THAT THERE ARE RECALLS BUT NONE FOR MY VIN # AND ALOT OF THE DESCRIPTIONS ARE SIMILAR TO WHAT I AM EXPERIENCING.

NHTSA ODI #11281642

89,970 miles · Nov 20, 2019
Air BagsElectrical SystemExterior Lighting

THE HEADLIGHTS WILL CUT OUT AS IM DRIVING.. SOMETIMES ONE SIDE FIRST THEN BOTH.. OR BOTH ST THE SAME TIME.. AS IM DRIVING THE AIR BAG LIGHT COMES ON AND OFF ON ITS OWN MY TPMS LIGHT WILL COME ON AND SOME DAYS IT WON'T SHOW THE PSI IN THE TIRE ON THE DASH

NHTSA ODI #11281465

48,000 miles · Nov 20, 2019
Power Train

MY VEHICLE RANDOMLY STARTS IN NEUTRAL WITH THE SERVICE PARK BREAK LIGHT ILLUMINATED. IT WILL NOT SHIFT AT ALL, TURNS ON AND OFF, BUT STARTS IN NEUTRAL. FIRST HAPPENED IN SEPTEMBER 28, 2019, I GO TO THE STORE, TURN MY CAR OFF, GO IN PURCHASE MY ITEMS, AND WHEN I COME BACK AND START MY CAR, IT STARTS IN NEUTRAL AFTER PURCHASING TH…

Read full complaint

MY VEHICLE RANDOMLY STARTS IN NEUTRAL WITH THE SERVICE PARK BREAK LIGHT ILLUMINATED. IT WILL NOT SHIFT AT ALL, TURNS ON AND OFF, BUT STARTS IN NEUTRAL. FIRST HAPPENED IN SEPTEMBER 28, 2019, I GO TO THE STORE, TURN MY CAR OFF, GO IN PURCHASE MY ITEMS, AND WHEN I COME BACK AND START MY CAR, IT STARTS IN NEUTRAL AFTER PURCHASING THE VEHICLE IN MAY WITH ALMOST 40,000 MILES. IT WAS LESS THAN 50,000 WHEN IT FIRST OCCURRED, AND IS JUST OVER 50 NOW THAT IT HAS HAPPENED AGAIN. THIS WILL BE THE THIRD TIME HAVING TO TAKE IT TO THE DEALER FOR THIS ISSUE. EVERY TIME IT DOES THIS IT USUALLY OUT SOMEWHERE. THE VEHICLE IS ALWAYS OFF AND STATIONARY WHEN IT OCCURS. FIRST TIME I WAS TOLD IT WAS MISSING AN ARS RELAY, AND THAT'S WHY IT WAS DOING IT. LAST TIME I WAS TOLD THE COMPUTER NEEDED TO BE REPROGRAMMED. I NOW HAVE TO GET THE CAR OUT OF MY GARAGE, SO I CAN HAVE IT TOWED TO THE DEALER AGAIN TO SEE WHAT NON-SENSE THEY WILL TELL ME THIS TIME. THEY THINK BECAUSE I'M A WOMAN THAT I DON'T HAVE COMMON SENSE. I HATE MY LOCAL DEALERS SERVICE DEPARTMENT, AND NOW I HAVE TO GO BACK YET AGAIN AFTER ONLY HAVING THE VEHICLE BACK MAYBE 2 WEEKS, TO SEE WHY IT ONLY STARTS IN NEUTRAL.

NHTSA ODI #11281348

70,000 miles · Nov 19, 2019
Electrical SystemEngineFuel/propulsion System

THE VEHICLE TURNS OFF WHILE DRIVING. HAS HAPPENED MANY TIMES. HAVE TO PULL OVER AND RESTART THE ENGINE. IT HAS HAPPENED NUMEROUS TIMES AND HAS NO EARNING OR EARNINGS ON DASHBOARD. IT HAPPENED TODAY DRIVING HOME IN THE RAIN.

NHTSA ODI #11281208

Mileage unknown · Nov 17, 2019
Electrical System

CHANGED BATTERY IN CAR IT WOULDN'T GO IN BUT ONE GEAR N THAT WAS NEUTRAL HAD TO TAKE IT TO THE SHOP N THAT DOESN'T MAKE ANY SINCE JUST CHANGED THE BATTERY

NHTSA ODI #11280633

90,000 miles · Nov 17, 2019
Electrical SystemElectronic Stability Control (esc)Engine

THE CAR STARTS FINE, BUT WILL DIE WHEN IDLING OR AT A DECLINE IN SPEED. WILL SHUT OFF HAVE YOU PLACE THE CAR BACK IN PARK TO TRY AND RESTART. SOMETIME IT WILL START AFTER 5 SECONDS AFTER SHUT OFF AND OTHERS WILL TAKE A FEW MINUTES. ITS A HARD RESTART WHEN IT DOES START, AND DRIVES ROUGH FOR THE FIRST 5 MILES OR SO, AND RETURNS …

Read full complaint

THE CAR STARTS FINE, BUT WILL DIE WHEN IDLING OR AT A DECLINE IN SPEED. WILL SHUT OFF HAVE YOU PLACE THE CAR BACK IN PARK TO TRY AND RESTART. SOMETIME IT WILL START AFTER 5 SECONDS AFTER SHUT OFF AND OTHERS WILL TAKE A FEW MINUTES. ITS A HARD RESTART WHEN IT DOES START, AND DRIVES ROUGH FOR THE FIRST 5 MILES OR SO, AND RETURNS TO DRIVING FINE. MY CAR HAS DONE THIS MULITPLE TIMES AT RED LIGHTS AND WHILE TURNING ONTO A EXIT RAMP DURNING THE DECELERATION ONTO A HIGHWAY.

NHTSA ODI #11280600

Official recalls

8

18V332000 · Electrical System:software; Electrical System:wiring; Vehicle Speed Control:cruise Control

May 17, 2018

Chrysler (FCA US LLC) is recalling certain 2014-2018 Dodge Journey, Charger and Durango, RAM 2500, 3500, 3500 Cab Chassis (more than 10,000lb), 4500 Cab Chassis and 5500 Cab Chassis, Jeep Cherokee and Grand Cherokee and Chrysler 300, 2014-2019 RAM 1500, 2015-2018 Dodge Challenger, 2015-2017 Chrysler 200, 2016-2018 RAM 3500 Cab Chassis (less than 10,000 lb), 2017-2018 Chrysler Pacifica and 2018 Jeep Wrangler vehicles. These vehicles are being recalled to address a defect that could prevent the cruise control system from disengaging. If, when using cruise control, there is a short circuit within the vehicle's wiring, the driver may not be able to shut off the cruise control either by depressing the brake pedal or manually turning the system off once it has been engaged, resulting in either the vehicle maintaining its current speed or possibly accelerating.

Consequence & remedy

Consequence: If the vehicle maintains its speed or accelerates despite attempts to deactivate the cruise control, there would be an increased risk of a crash.

Remedy: Chrysler will notify owners, and dealers will inspect the software, and perform a software flash on the engine or powertrain control module, free of charge. The recall began June 4, 2018. Owners may contact Chrysler customer service at 1-800-853-1403. Note: Owners are advised to stop using cruise control until the software update has been performed. In the event that cruise control cannot be disengaged while driving, owners should firmly and steadily apply the brakes and shift the transmission to neutral, placing the vehicle in park once it has stopped.

Additional source detail variants (3)

Electrical System:software

Chrysler (FCA US LLC) is recalling certain 2014-2018 Dodge Journey, Charger and Durango, RAM 2500, 3500, 3500 Cab Chassis (more than 10,000lb), 4500 Cab Chassis and 5500 Cab Chassis, Jeep Cherokee and Grand Cherokee and Chrysler 300, 2014-2019 RAM 1500, 2015-2018 Dodge Challenger, 2015-2017 Chrysler 200, 2016-2018 RAM 3500 Cab Chassis (less than 10,000 lb), 2017-2018 Chrysler Pacifica and 2018 Jeep Wrangler vehicles. These vehicles are being recalled to address a defect that could prevent the cruise control system from disengaging. If, when using cruise control, there is a short circuit within the vehicle's wiring, the driver may not be able to shut off the cruise control either by depressing the brake pedal or manually turning the system off once it has been engaged, resulting in either the vehicle maintaining its current speed or possibly accelerating.

Consequence: If the vehicle maintains its speed or accelerates despite attempts to deactivate the cruise control, there would be an increased risk of a crash.

Remedy: Chrysler will notify owners, and dealers will inspect the software, and perform a software flash on the engine or powertrain control module, free of charge. The recall began June 4, 2018. Owners may contact Chrysler customer service at 1-800-853-1403. Note: Owners are advised to stop using cruise control until the software update has been performed. In the event that cruise control cannot be disengaged while driving, owners should firmly and steadily apply the brakes and shift the transmission to neutral, placing the vehicle in park once it has stopped.

Vehicle Speed Control:cruise Control

Chrysler (FCA US LLC) is recalling certain 2014-2018 Dodge Journey, Charger and Durango, RAM 2500, 3500, 3500 Cab Chassis (more than 10,000lb), 4500 Cab Chassis and 5500 Cab Chassis, Jeep Cherokee and Grand Cherokee and Chrysler 300, 2014-2019 RAM 1500, 2015-2018 Dodge Challenger, 2015-2017 Chrysler 200, 2016-2018 RAM 3500 Cab Chassis (less than 10,000 lb), 2017-2018 Chrysler Pacifica and 2018 Jeep Wrangler vehicles. These vehicles are being recalled to address a defect that could prevent the cruise control system from disengaging. If, when using cruise control, there is a short circuit within the vehicle's wiring, the driver may not be able to shut off the cruise control either by depressing the brake pedal or manually turning the system off once it has been engaged, resulting in either the vehicle maintaining its current speed or possibly accelerating.

Consequence: If the vehicle maintains its speed or accelerates despite attempts to deactivate the cruise control, there would be an increased risk of a crash.

Remedy: Chrysler will notify owners, and dealers will inspect the software, and perform a software flash on the engine or powertrain control module, free of charge. The recall began June 4, 2018. Owners may contact Chrysler customer service at 1-800-853-1403. Note: Owners are advised to stop using cruise control until the software update has been performed. In the event that cruise control cannot be disengaged while driving, owners should firmly and steadily apply the brakes and shift the transmission to neutral, placing the vehicle in park once it has stopped.

Electrical System:wiring

Chrysler (FCA US LLC) is recalling certain 2014-2018 Dodge Journey, Charger and Durango, RAM 2500, 3500, 3500 Cab Chassis (more than 10,000lb), 4500 Cab Chassis and 5500 Cab Chassis, Jeep Cherokee and Grand Cherokee and Chrysler 300, 2014-2019 RAM 1500, 2015-2018 Dodge Challenger, 2015-2017 Chrysler 200, 2016-2018 RAM 3500 Cab Chassis (less than 10,000 lb), 2017-2018 Chrysler Pacifica and 2018 Jeep Wrangler vehicles. These vehicles are being recalled to address a defect that could prevent the cruise control system from disengaging. If, when using cruise control, there is a short circuit within the vehicle's wiring, the driver may not be able to shut off the cruise control either by depressing the brake pedal or manually turning the system off once it has been engaged, resulting in either the vehicle maintaining its current speed or possibly accelerating.

Consequence: If the vehicle maintains its speed or accelerates despite attempts to deactivate the cruise control, there would be an increased risk of a crash.

Remedy: Chrysler will notify owners, and dealers will inspect the software, and perform a software flash on the engine or powertrain control module, free of charge. The recall began June 4, 2018. Owners may contact Chrysler customer service at 1-800-853-1403. Note: Owners are advised to stop using cruise control until the software update has been performed. In the event that cruise control cannot be disengaged while driving, owners should firmly and steadily apply the brakes and shift the transmission to neutral, placing the vehicle in park once it has stopped.

16V529000 · Power Train:automatic Transmission

Jul 12, 2016

Chrysler (FCA US LLC) is recalling certain model year 2014-2015 Jeep Cherokee and 2015 Chrysler 200, Jeep Renegade, RAM ProMaster, and 2016 Fiat 500X vehicles equipped with 9-speed automatic transmissions. The transmission sensor clusters may have insufficient crimps in the transmission wire harness, and as a result, the transmission may unexpectedly shift to neutral. On August 29, 2016 Chrysler added the 2016 Fiat 500X vehicles to this recall.

Consequence & remedy

Consequence: If the vehicle unexpectedly shifts to neutral, there is an increased risk of a crash.

Remedy: Chrysler will notify owners, dealers will reprogram the Powertrain Control Module and the Transmission Control Module and if necessary replace the transaxle range sensor wire harness, free of charge. The recall began on November 7, 2016. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is S55.

16V114000 · Air Bags:sensor:occupant Classification; Seats

Feb 26, 2016

Chrysler (FCA US LLC) is recalling certain model year 2015 Chrysler 200 vehicles manufactured April 7, 2014, to August 3, 2015. During service work, the affected vehicles may have had either the Occupant Classification Module (OCM) or the Seat Cushion Foam (SCF) of the front passenger seat replaced instead of the both pieces together, which make up a complete calibrated set.

Consequence & remedy

Consequence: If both pieces were not replaced together, the occupant detection and classification system may not be properly calibrated and the passenger air bag may improperly deploy in the event of a crash, increasing the risk of injury.

Remedy: Chrysler will notify owners, and dealers will install a new OCM-SCF seat service kit, free of charge. The recall began on May 27, 2016. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is S09.

Additional source detail variants (2)

Air Bags:sensor:occupant Classification

Chrysler (FCA US LLC) is recalling certain model year 2015 Chrysler 200 vehicles manufactured April 7, 2014, to August 3, 2015. During service work, the affected vehicles may have had either the Occupant Classification Module (OCM) or the Seat Cushion Foam (SCF) of the front passenger seat replaced instead of the both pieces together, which make up a complete calibrated set.

Consequence: If both pieces were not replaced together, the occupant detection and classification system may not be properly calibrated and the passenger air bag may improperly deploy in the event of a crash, increasing the risk of injury.

Remedy: Chrysler will notify owners, and dealers will install a new OCM-SCF seat service kit, free of charge. The recall began on May 27, 2016. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is S09.

Seats

Chrysler (FCA US LLC) is recalling certain model year 2015 Chrysler 200 vehicles manufactured April 7, 2014, to August 3, 2015. During service work, the affected vehicles may have had either the Occupant Classification Module (OCM) or the Seat Cushion Foam (SCF) of the front passenger seat replaced instead of the both pieces together, which make up a complete calibrated set.

Consequence: If both pieces were not replaced together, the occupant detection and classification system may not be properly calibrated and the passenger air bag may improperly deploy in the event of a crash, increasing the risk of injury.

Remedy: Chrysler will notify owners, and dealers will install a new OCM-SCF seat service kit, free of charge. The recall began on May 27, 2016. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is S09.

15V470000 · Electrical System

Jul 28, 2015

Chrysler (FCA US LLC) is recalling certain model year 2015 Chrysler 200 vehicles manufactured January 7, 2014, to September 23, 2014. The affected vehicles may have a Power Distribution Center (PDC) electrical connector that may cause intermittent power failures to certain electrical components.

Consequence & remedy

Consequence: An intermittent loss of power to electrical components could cause a vehicle to stall without warning, increasing the risk of a crash.

Remedy: Chrysler will notify owners, and dealers will replace the C4 connector using a 12 wire split kit for 3.6L engines, or replace the transmission wiring harness for 2.4L engines, free of charge. The recall began on October 21, 2015. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is R24.

15V461000 · Equipment:electrical:radio/tape Deck/cd Etc.

Jul 23, 2015

Chrysler (FCA US LLC) is recalling certain model year 2013-2015 Ram 1500, 2500, 3500, 4500, and 5500, 2015 Chrysler 200, Chrysler 300, Dodge Charger, and Dodge Challenger, 2014-2015 Jeep Grand Cherokee, Cherokee, and Dodge Durango, and 2013-2015 Dodge Viper vehicles. The affected vehicles are equipped with radios that have software vulnerabilities that can allow third-party access to certain networked vehicle control systems.

Consequence & remedy

Consequence: Exploitation of the software vulnerability may result in unauthorized remote modification and control of certain vehicle systems, increasing the risk of a crash.

Remedy: Chrysler will notify and mail affected owners a USB drive that includes a software update that eliminates the vulnerability, free of charge. Optionally, owners may download the update to their own USB drive from http://www.driveuconnect.com/software-update/ or take their vehicle to a Chrysler dealer for immediate installation. In an effort to mitigate the effects of this security vulnerability, Chrysler has had the wireless service provider close the open cellular connection to the vehicle that provided unauthorized access to the vehicle network. This measure may not have been implemented on all vehicles and does not address access by other means that will be remedied by the software update. The recall began on August 25, 2015. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is R40.

15V090000 · Power Train:automatic Transmission

Feb 13, 2015

Chrysler (FCA US LLC) is recalling certain model year 2015 Chrysler 200 vehicles manufactured March 9, 2014, to December 15, 2014, and equipped with a 9-speed automatic transmission. The automatic transmission parking pawl may become contaminated or the park rod may become dislodged or broken. This may prevent the transmission from shifting into the Park position.

Consequence & remedy

Consequence: If the shift indicator displays "Park" but the park lock does not engage, the vehicle may roll away increasing the risk of a crash.

Remedy: Chrysler will notify owners, and dealers inspect the transmission. Any transmission found with contamination or a park rod will be replaced, free of charge. The recall began April 9, 2015. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is R08.

14V480000 · Electrical System:wiring

Aug 5, 2014

Chrysler Group LLC (Chrysler) is recalling certain model year 2015 Chrysler 200 vehicles manufactured May 19, 2014, to June 21, 2014. The affected vehicles may have been built with a driver side door wiring harness of an insufficient wire gauge, resulting in excessive heat which may melt the wiring insulation.

Consequence & remedy

Consequence: Excessive heat and melting wiring insulation may result in an electrical short, increasing the risk of a fire.

Remedy: Chrysler will notify owners, and dealers will replace the door wiring harness, free of charge. The recall began on October 3, 2014. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is P43.

14V392000 · Suspension:rear:shock Absorber

Jul 2, 2014

Chrysler Group LLC (Chrysler) is recalling certain model year 2014 Jeep Cherokee and Ram 1500 and 2015 Chrysler 200 vehicles. Due to an insufficient weld, the rear shocks may detach from the vehicle at one end and possibly damage other chassis components, the tire or result in reduced braking.

Consequence & remedy

Consequence: Damage to the tire or reduced braking increases the risk of a vehicle crash.

Remedy: Chrysler will notify owners, and dealers will inspect the rear shocks and replace any affected ones, free of charge. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is P37.

Model-level recall history does not show whether a particular VIN is affected or has received a repair. Check a VIN with NHTSA ↗

NHTSA investigations

1

RQ15004 · Software Security Vulnerability

Opened Jul 24, 2015 · Closed Jan 5, 2016

Status: closed (inferred from source dates) · Electrical System:software

On July 23, 2015, Fiat Chrysler Automobiles (FCA) launched Safety Recall 15V-461 to remedy security vulnerabilities in approximately 1.4 million model year (MY) 2013 through 2015 vehicles equipped with Uconnect head units (HU) 8.4A (RA3 radio) and 8.4AN (RA4 radio) manufactured by Harman International.On July 24, 2015, the Office of Defects Investigation (ODI) opened Recall Query, RQ 15-004, to investigate HU security vulnerabilities and remedy effectiveness in the recalled population and to determine whether similar units have been supplied for use in other FCA vehicles.In an August 11, 2015 letter, FCA submitted a second Part 573 safety recall report expanding the scope of the Uconnect RA4 model radio to include additional 7,810 MY 2015 Jeep Renegade vehicles manufactured from September 18, 2014 through June 25, 2015 (Recall 15V-508).Scope analysis indicated that Uconnect radios installed in FCA vehicles not included in recalls 15V-461 or 15V-508 (subject recalls) are not equipped with built-in cellular access or short range wireless communication features and, thus, do not contain the security vulnerabilities addressed by the subject recalls. SUBJECT VEHICLES: MY2014 through 2015 Dodge Durango, Jeep Grand Cherokee and Jeep Cherokee sport utility vehicles; MY2013 through 2015 Ram 1500, 2500, 3500 and 4500/5500 pickup trucks; MY2013 through 2015 Dodge Viper vehicles; and MY2015 Chrysler 200, 300, Jeep Renegade, Dodge Charger and Challenger vehicles.According to FCA, long and short range wireless vulnerabilities identified in the recalled vehicles could allow unauthorized third-party access to, and manipulation of, networked vehicle control systems.Successful exploitation of the vulnerabilities, coupled with reverse engineering of networked microprocessor control modules, could result in unauthorized manipulation of vehicle control systems. This unauthorized manipulation of vehicle controls and systems could expose the driver, vehicle occupants or other highway users to an increased risk of injury.FCA and its network provider, Sprint, conducted a nationwide campaign to block access to a radio communications port that was unintentionally left open.On July 27, 2015, short range wireless vulnerabilities were also blocked.Finally, third party security evaluation and regression testing identified vulnerabilities that were either remedied by Sprint or through updates to the FCA Uconnect software.ODI identified a total of 30 complaints or field reports on unique vehicles submitted by FCA (29) or received by NHTSA (1) alleging incidents of theft from a vehicle or anomalous performance that the owner alleged were caused by, or may have been caused by, remote hacking.Twenty-six (87%) of these reports were submitted after a magazine article was published on July 21, 2015, describing the remote hacking of an FCA vehicle by researchers who were able to affect the operation of various vehicle control systems, including the service brakes, steering, throttle and ignition.Most of the complaints involved vehicle systems that were not safety critical (e.g., complaints related to radio, navigation system, or air-conditioning control) and did not affect vehicle control.Three complaints reported engine stalls.One owner reported sudden unintended acceleration allegedly related to hacking.None of the complaints or field reports reviewed involved the steering and braking vehicle control effects demonstrated by the research hackers prior to the recall.There were no confirmed incidents of hacking in any of the records reviewed by ODI.The remedies completed by Sprint and FCA appear to have eliminated vulnerabilities that mi