NHTSA owner reports · September 18, 2026 snapshot.
Unknown Or Other complaints
2 reportsClear category filter37,400 miles · Jun 14, 2017
Electrical SystemEngineUnknown Or OtherFire
MAY 30, 2017 MY 2014 RAM 5500 DIESEL DUMP TRUCK HAD A FIRE UNDER THE HOOD. THERE WAS EXTENSIVE DAMAGE/MELTING FROM THE FIRE. I PURCHASED THE VEHICLE NEW IN APRIL OF 2015 AND IT WAS 'JUST OUT OF WARRANTY" AT JUST OVER 37,000 MILES ON IT. THE SOURCE OF THE DAMAGE WAS DETERMINED TO BE THE DENSO INTERNATIONAL ALTERNATOR. FCA SENT …
Read full complaint
MAY 30, 2017 MY 2014 RAM 5500 DIESEL DUMP TRUCK HAD A FIRE UNDER THE HOOD. THERE WAS EXTENSIVE DAMAGE/MELTING FROM THE FIRE. I PURCHASED THE VEHICLE NEW IN APRIL OF 2015 AND IT WAS 'JUST OUT OF WARRANTY" AT JUST OVER 37,000 MILES ON IT. THE SOURCE OF THE DAMAGE WAS DETERMINED TO BE THE DENSO INTERNATIONAL ALTERNATOR. FCA SENT A FIELD INSPECTOR TO THE SERVICE CENTER WHERE THE TRUCK WAS TOWED, AND MY VEHICLE INSURANCE COMPANY ALSO SENT AN INSPECTOR THERE. MY INSURANCE COMPANY WILL COVER MOST OF THE DAMAGES BUT NOT THE ALTERNATOR NOR THE LABOR FOR THE ALTERNATOR AS FCA KNEW OR SHOULD HAVE KNOWN THAT THAT PART WAS DEFECTIVE AS RAM HAS RECALLED HUNDREDS OF THOUSANDS OF ALTERNATORS DUE TO SAFETY FIRE HAZARD BUT THEN CONTINUE TO USE THE SAME MANUFACTURER'S DEFECTIVE PRODUCTS IN THEIR VEHICLES. FCA SENT A LETTER REFUSING TO GIVE GOOD WILL AUTHORIZATION, AS WAS PROMISED BY THE CHRYSLER DEALER I PURCHASED IT FROM, TO COVER THE DAMAGE AND REPAIRS "BECAUSE IT'S OUT OF ALTERNATOR WARRANTY" - THEY KNEW THAT BEFORE THEY TOWED IT TO THE SERVICE CENTER. THE FEDERAL MAGNUSON-MOSS WARRANTY ACT STATES THAT CONSUMERS HAVE AN IMPLIED WARRANTY BEYOND THE LIMITED WARRANTY FROM MANUFACTURERS. CONSUMERS PURCHASE NEW VEHICLES IN GOOD FAITH THAT THEY ARE NOT GOING TO START ON FIRE DUE TO DEFECTIVE PARTS. THE FACT THAT THE SAME PART, THE ALTERNATOR, HAS HAD ABOUT 900,000 RECALLS IN THE LAST SEVERAL YEARS SHOWS ME THAT THEY KNEW OR SHOULD HAVE KNOWN THAT CONTINUING TO USE THE DENSO INTERNATIONAL ALTERNATORS IS A FIRE SAFETY HAZARD AND MY TRUCK SHOULD BE PART OF A RECALL SINCE IT STARTED ON FIRE ORIGINATING FROM THE ALTERNATOR. CONSUMERS DESERVE BETTER! THE VEHICLE HAS A SMELL BUT NO SENSORS CAME ON, THE POWER STEERING STARTED TO ACT UP WHILE DRIVING, I PULLED IN MY DRIVEWAY AND THE VEHICLE WAS ON FIRE. PUT OUT THE FIRE AND PULLED THE ALTERNATOR TO GET THE PART NUMBER TO GIVE TO AUTO PLACE.
NHTSA ODI #10995221
37,000 miles · Jun 7, 2017
Unknown Or OtherFire
2014 RAM 5500 DIESEL PURCHASED NEW IN APRIL 2015 FIRE UNDER HOOD ON MAY 30, 2017. NO LIGHTS CAME ON AS THE SENSORS WERE BURNED OUT AS WELL AS THE ALTERNATOR, THE HARNESSES AND OTHER PARTS UNDER THE HOOD. THE TRUCK WAS IN MOTION BUT FLAMES NOTICED WHEN PULLED IN DRIVEWAY. PUT OUT FIRE AND CALLED DEALER. SPECIAL INVESTIGATOR D…
Read full complaint
2014 RAM 5500 DIESEL PURCHASED NEW IN APRIL 2015 FIRE UNDER HOOD ON MAY 30, 2017. NO LIGHTS CAME ON AS THE SENSORS WERE BURNED OUT AS WELL AS THE ALTERNATOR, THE HARNESSES AND OTHER PARTS UNDER THE HOOD. THE TRUCK WAS IN MOTION BUT FLAMES NOTICED WHEN PULLED IN DRIVEWAY. PUT OUT FIRE AND CALLED DEALER. SPECIAL INVESTIGATOR DEPART LOOKED AT IT AT SERVICE CENTER ON MONDAY, JUNE 5. STILL HAVE NOT HEARD ANYTHING. TRUCK OUR MAIN SOURCE OF REVENUE AND WE ARE LOSING BUSINESS.
NHTSA ODI #10993765
Official recalls
10May 27, 2021
Chrysler (FCA US, LLC) is recalling certain 2012-2021 RAM 3500, 3500 Cab Chassis, 4500 Cab Chassis, and 5500 Cab Chassis vehicles. Incorrect information in the Service and Owner's Manuals may cause the flanged lug nuts to be over-tightened, which could result in a broken wheel stud and possible wheel separation.
Consequence & remedy
Consequence: Wheel separation can cause a vehicle crash.
Remedy: Dealers will update the torque specification in the owner's manual and other published service documents. Dealers will also inspect the vehicle's wheel studs, replacing them if necessary, free of charge. Owner notification letters were mailed on November 30, 2021. Campaign Y36 owner notification letters were mailed on November 30, 2021. Campaign Y26 owner notification letters were mailed on December 1, 2021. Owners may contact FCA US customer service at 1-800-853-1403. FCA US's numbers for this recall are Y26 and Y36.
May 17, 2018
Chrysler (FCA US LLC) is recalling certain 2014-2018 Dodge Journey, Charger and Durango, RAM 2500, 3500, 3500 Cab Chassis (more than 10,000lb), 4500 Cab Chassis and 5500 Cab Chassis, Jeep Cherokee and Grand Cherokee and Chrysler 300, 2014-2019 RAM 1500, 2015-2018 Dodge Challenger, 2015-2017 Chrysler 200, 2016-2018 RAM 3500 Cab Chassis (less than 10,000 lb), 2017-2018 Chrysler Pacifica and 2018 Jeep Wrangler vehicles. These vehicles are being recalled to address a defect that could prevent the cruise control system from disengaging. If, when using cruise control, there is a short circuit within the vehicle's wiring, the driver may not be able to shut off the cruise control either by depressing the brake pedal or manually turning the system off once it has been engaged, resulting in either the vehicle maintaining its current speed or possibly accelerating.
Consequence & remedy
Consequence: If the vehicle maintains its speed or accelerates despite attempts to deactivate the cruise control, there would be an increased risk of a crash.
Remedy: Chrysler will notify owners, and dealers will inspect the software, and perform a software flash on the engine or powertrain control module, free of charge. The recall began June 4, 2018. Owners may contact Chrysler customer service at 1-800-853-1403. Note: Owners are advised to stop using cruise control until the software update has been performed. In the event that cruise control cannot be disengaged while driving, owners should firmly and steadily apply the brakes and shift the transmission to neutral, placing the vehicle in park once it has stopped.
Additional source detail variants (3)
Electrical System:software
Chrysler (FCA US LLC) is recalling certain 2014-2018 Dodge Journey, Charger and Durango, RAM 2500, 3500, 3500 Cab Chassis (more than 10,000lb), 4500 Cab Chassis and 5500 Cab Chassis, Jeep Cherokee and Grand Cherokee and Chrysler 300, 2014-2019 RAM 1500, 2015-2018 Dodge Challenger, 2015-2017 Chrysler 200, 2016-2018 RAM 3500 Cab Chassis (less than 10,000 lb), 2017-2018 Chrysler Pacifica and 2018 Jeep Wrangler vehicles. These vehicles are being recalled to address a defect that could prevent the cruise control system from disengaging. If, when using cruise control, there is a short circuit within the vehicle's wiring, the driver may not be able to shut off the cruise control either by depressing the brake pedal or manually turning the system off once it has been engaged, resulting in either the vehicle maintaining its current speed or possibly accelerating.
Consequence: If the vehicle maintains its speed or accelerates despite attempts to deactivate the cruise control, there would be an increased risk of a crash.
Remedy: Chrysler will notify owners, and dealers will inspect the software, and perform a software flash on the engine or powertrain control module, free of charge. The recall began June 4, 2018. Owners may contact Chrysler customer service at 1-800-853-1403. Note: Owners are advised to stop using cruise control until the software update has been performed. In the event that cruise control cannot be disengaged while driving, owners should firmly and steadily apply the brakes and shift the transmission to neutral, placing the vehicle in park once it has stopped.
Vehicle Speed Control:cruise Control
Chrysler (FCA US LLC) is recalling certain 2014-2018 Dodge Journey, Charger and Durango, RAM 2500, 3500, 3500 Cab Chassis (more than 10,000lb), 4500 Cab Chassis and 5500 Cab Chassis, Jeep Cherokee and Grand Cherokee and Chrysler 300, 2014-2019 RAM 1500, 2015-2018 Dodge Challenger, 2015-2017 Chrysler 200, 2016-2018 RAM 3500 Cab Chassis (less than 10,000 lb), 2017-2018 Chrysler Pacifica and 2018 Jeep Wrangler vehicles. These vehicles are being recalled to address a defect that could prevent the cruise control system from disengaging. If, when using cruise control, there is a short circuit within the vehicle's wiring, the driver may not be able to shut off the cruise control either by depressing the brake pedal or manually turning the system off once it has been engaged, resulting in either the vehicle maintaining its current speed or possibly accelerating.
Consequence: If the vehicle maintains its speed or accelerates despite attempts to deactivate the cruise control, there would be an increased risk of a crash.
Remedy: Chrysler will notify owners, and dealers will inspect the software, and perform a software flash on the engine or powertrain control module, free of charge. The recall began June 4, 2018. Owners may contact Chrysler customer service at 1-800-853-1403. Note: Owners are advised to stop using cruise control until the software update has been performed. In the event that cruise control cannot be disengaged while driving, owners should firmly and steadily apply the brakes and shift the transmission to neutral, placing the vehicle in park once it has stopped.
Electrical System:wiring
Chrysler (FCA US LLC) is recalling certain 2014-2018 Dodge Journey, Charger and Durango, RAM 2500, 3500, 3500 Cab Chassis (more than 10,000lb), 4500 Cab Chassis and 5500 Cab Chassis, Jeep Cherokee and Grand Cherokee and Chrysler 300, 2014-2019 RAM 1500, 2015-2018 Dodge Challenger, 2015-2017 Chrysler 200, 2016-2018 RAM 3500 Cab Chassis (less than 10,000 lb), 2017-2018 Chrysler Pacifica and 2018 Jeep Wrangler vehicles. These vehicles are being recalled to address a defect that could prevent the cruise control system from disengaging. If, when using cruise control, there is a short circuit within the vehicle's wiring, the driver may not be able to shut off the cruise control either by depressing the brake pedal or manually turning the system off once it has been engaged, resulting in either the vehicle maintaining its current speed or possibly accelerating.
Consequence: If the vehicle maintains its speed or accelerates despite attempts to deactivate the cruise control, there would be an increased risk of a crash.
Remedy: Chrysler will notify owners, and dealers will inspect the software, and perform a software flash on the engine or powertrain control module, free of charge. The recall began June 4, 2018. Owners may contact Chrysler customer service at 1-800-853-1403. Note: Owners are advised to stop using cruise control until the software update has been performed. In the event that cruise control cannot be disengaged while driving, owners should firmly and steadily apply the brakes and shift the transmission to neutral, placing the vehicle in park once it has stopped.
Dec 21, 2017
Chrysler (FCA US LLC) is recalling various Dodge, Chrysler, and RAM vehicles equipped with Kidde Plastic-Handle or Push Button 'Pindicator' Fire Extinguishers. A list of the affected trailer models is available at: https://static.nhtsa.gov/odi/rcl/2017/RMISC-17V824-0103.pdf. These extinguishers may become clogged, preventing the extinguisher from discharging as expected or requiring excessive force to activate the extinguisher. Additionally, in certain models, the nozzle may detach from the valve assembly with enough force that it could cause injury and also render the product inoperable. For a full list of the affected fire extinguisher models visit: https://static.nhtsa.gov/odi/rcl/2017/RMISC-17E062-5427.pdf
Consequence & remedy
Consequence: If the fire extinguisher does not function properly, it can increase the risk of injury in the event of a fire.
Remedy: Chrysler will notify owners instructing them to contact Kidde for a replacement fire extinguisher, free of charge. The recall began February 14, 2018. Owners may contact Chrysler customer service at 1-800-853-1403 or Kidde customer service service toll-free at 1-855-262-3540, or online at www.kidde.com and click on "Product Safety Recall" for more information. Chrysler's number for this recall is T82.
Dec 20, 2017
Chrysler (FCA US LLC) is recalling certain 2016-2017 Ram 3500 Cab Chassis with a Gross Vehicle Weight Rating (GVWR) of less than 10,000 lbs, 2011-2017 Ram 3500, 4500 and 5500 Cab Chassis vehicles, 2009-2017 Ram 1500 and 2010-2017 Ram 2500 and 3500 pickup trucks, all equipped with a column shifter. Pushing the brake pedal for prolonged periods when the vehicle is running and in PARK may cause the Brake Transmission Shift Interlock (BTSI) pin to stick in the open position. With the pin in the open position, the transmission can be shifted out of PARK into any gear without pushing the brake pedal or having the key in the ignition.
Consequence & remedy
Consequence: Being able to shift the transmission without pushing the brake pedal and/or without a key in the ignition can increase the risk of an unintended vehicle rollaway that may result in personal injury or a crash.
Remedy: Chrysler will notify owners, and dealers will update the vehicle software, inspect the BTSI, and, as necessary, replace it, free of charge. The recall began February 26, 2018. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is T79.
Sep 12, 2017
Chrysler (FCA US LLC) is recalling certain 2013-2017 RAM 2500, 3500, 3500 Cab Chassis, 4500 Cab Chassis, and 5500 Cab Chassis vehicles, equipped with Cummins 6.7L Turbo Diesel engines that have Concentric-brand water pumps without a vent hole. These water pumps may leak coolant.
Consequence & remedy
Consequence: The leaking water pump can increase the risk of an engine compartment fire.
Remedy: Chrysler will notify owners, and dealers will replace the water pumps, free of charge. The recall began February 26, 2018. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is T51.
Jul 23, 2015
Chrysler (FCA US LLC) is recalling certain model year 2013-2015 Ram 1500, 2500, 3500, 4500, and 5500, 2015 Chrysler 200, Chrysler 300, Dodge Charger, and Dodge Challenger, 2014-2015 Jeep Grand Cherokee, Cherokee, and Dodge Durango, and 2013-2015 Dodge Viper vehicles. The affected vehicles are equipped with radios that have software vulnerabilities that can allow third-party access to certain networked vehicle control systems.
Consequence & remedy
Consequence: Exploitation of the software vulnerability may result in unauthorized remote modification and control of certain vehicle systems, increasing the risk of a crash.
Remedy: Chrysler will notify and mail affected owners a USB drive that includes a software update that eliminates the vulnerability, free of charge. Optionally, owners may download the update to their own USB drive from http://www.driveuconnect.com/software-update/ or take their vehicle to a Chrysler dealer for immediate installation. In an effort to mitigate the effects of this security vulnerability, Chrysler has had the wireless service provider close the open cellular connection to the vehicle that provided unauthorized access to the vehicle network. This measure may not have been implemented on all vehicles and does not address access by other means that will be remedied by the software update. The recall began on August 25, 2015. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is R40.
Jul 22, 2015
Chrysler (FCA US LLC) is recalling certain model year 2012-2014 Ram 1500, 2500, 3500, 4500, and 5500 trucks manufactured January 18, 2011, to October 7, 2014, and equipped with the Electronic Vehicle Information Center option. The affected vehicles have a steering wheel wiring harness that may rub against the driver air bag module retainer spring.
Consequence & remedy
Consequence: This abrasion may result in an electrical short that could cause driver's frontal air bag to unexpectedly deploy. Inadvertent deployment of the air bag may increase the risk of injury and the possibility of a vehicle crash.
Remedy: Chrysler will notify owners, and dealers will inspect, repair as necessary, and secure the steering wheel wiring harness. Additionally, protective caps will be added to the air bag retainer spring ends. These repairs will be done free of charge. The recall began on September 18, 2015. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is R36.
May 18, 2015
Chryser (FCA US LLC) is recalling certain model year 2014-2015 Ram 4500 and 5500 cab chassis trucks manufactured August 20, 2013, to January 27, 2015 and equipped with 6.4L Hemi engines. The affected vehicles have a maximum governed speed of 106 mph but are fitted with tires that are only rated for a maximum speed of 87 mph.
Consequence & remedy
Consequence: If the vehicle exceeds the tires' maximum speed rating, the tires may suddenly fail, increasing the risk of a crash.
Remedy: Chrysler has notified owners, and dealers will correct the electronic control unit software to limit the vehicle's speed to 87 mph, free of charge. The recall began on June 10, 2015. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is R17.
Oct 8, 2014
Chrysler Group LLC (Chrysler) is recalling certain model year 2010-2014 Ram 2500, 3500, 4500, and 5500 trucks manufactured March 27, 2009, to September 5, 2013. In the affected vehicles, the electrical connectors of the diesel fuel heater may overheat.
Consequence & remedy
Consequence: If the connectors overheat, the fuel heater may leak fuel, increasing the risk of a fire.
Remedy: Chrysler will notify owners, and dealers will replace the harness side connector with a silver plated beryllium copper terminal service kit, and inspect the fuel heater for leaks, replacing it as necessary, free of charge. Chrysler issued interim notification to owners on December 8, 2014. The recall began on April 27, 2015. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is P65.
Additional source detail variants (2)
Fuel System, Diesel
Chrysler Group LLC (Chrysler) is recalling certain model year 2010-2014 Ram 2500, 3500, 4500, and 5500 trucks manufactured March 27, 2009, to September 5, 2013. In the affected vehicles, the electrical connectors of the diesel fuel heater may overheat.
Consequence: If the connectors overheat, the fuel heater may leak fuel, increasing the risk of a fire.
Remedy: Chrysler will notify owners, and dealers will replace the harness side connector with a silver plated beryllium copper terminal service kit, and inspect the fuel heater for leaks, replacing it as necessary, free of charge. Chrysler issued interim notification to owners on December 8, 2014. The recall began on April 27, 2015. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is P65.
Engine And Engine Cooling:engine:diesel
Chrysler Group LLC (Chrysler) is recalling certain model year 2010-2014 Ram 2500, 3500, 4500, and 5500 trucks manufactured March 27, 2009, to September 5, 2013. In the affected vehicles, the electrical connectors of the diesel fuel heater may overheat.
Consequence: If the connectors overheat, the fuel heater may leak fuel, increasing the risk of a fire.
Remedy: Chrysler will notify owners, and dealers will replace the harness side connector with a silver plated beryllium copper terminal service kit, and inspect the fuel heater for leaks, replacing it as necessary, free of charge. Chrysler issued interim notification to owners on December 8, 2014. The recall began on April 27, 2015. Owners may contact Chrysler customer service at 1-800-853-1403. Chrysler's number for this recall is P65.
Mar 4, 2014
Chrysler Group LLC (Chrysler) is recalling certain model year 2014 Ram 5500 trucks manufactured August 14, 2013, through January 7, 2014. The certification label has the incorrect Gross Vehicle Weight Rating (GVWR). Thus, these vehicles do not conform to Federal Motor Vehicle Safety Standard (FMVSS) number 567 "Certification Regulations."
Consequence & remedy
Consequence: If the Certification Label has the incorrect Gross Vehicle Weight Rating (GVWR), the operator may overload the vehicle, increasing the risk of a crash.
Remedy: Chrysler will notify owners, and dealers will replace all existing certification labels with corrected certification labels, free of charge. The recall began on April 10, 2014. Owners may contact Chrysler at 1-800-853-1403. Chrysler's number associated with this recall is P07.
Model-level recall history does not show whether a particular VIN is affected or has received a repair. Check a VIN with NHTSA ↗
NHTSA investigations
2RQ25003 · Post Recall Remedy Brake Transmission Shift Interlock (btsi) Failure
Opened Jul 3, 2025 · No close date supplied
Status: open (inferred from source dates) · Power Train:automatic Transmission; Power Train:automatic Transmission:gear Position Indication (prndl)
The Office of Defects Investigation (ODI) has received 14 Vehicle Owner Questionnaire (VOQ) reports and 6 EWR Death & Injury (D&I) reports describing post recall remedy failures of the brake transmission shift interlock (BTSI) system in certain Model Year (MY) 2013-2018 RAM pickup trucks.The subject vehicle models include 1500, 2500, 3500, 4500, and 5500 trucks equipped with a column mounted shift lever.The failures of the BTSI described in the VOQs occurred on vehicles that had all previously been repaired under recall 17V-821 or 18V-100.Both recalls address a potential condition which can cause the BTSI locking pin to become stuck allowing the transmission to be shifted out of Park without depressing the brake pedal and/or without having a key in the ignition.Shifting the transmission out of Park when not having the brake pedal depressed can result in a vehicle rollaway. ODI is opening this Recall Query (RQ) to review the effectiveness of the 17V-821 and 18V-100 recall remedies, understand the root cause of additional vehicle rollaway incidents, and identify any other possible root cause that may affect the performance of the BTSI system. To review the ODI reports cited in the Opening Resume ODI Report Identification Number document, go to NHTSA.gov.
Additional source detail variants (2)
Power Train:automatic Transmission
The Office of Defects Investigation (ODI) has received 14 Vehicle Owner Questionnaire (VOQ) reports and 6 EWR Death & Injury (D&I) reports describing post recall remedy failures of the brake transmission shift interlock (BTSI) system in certain Model Year (MY) 2013-2018 RAM pickup trucks.The subject vehicle models include 1500, 2500, 3500, 4500, and 5500 trucks equipped with a column mounted shift lever.The failures of the BTSI described in the VOQs occurred on vehicles that had all previously been repaired under recall 17V-821 or 18V-100.Both recalls address a potential condition which can cause the BTSI locking pin to become stuck allowing the transmission to be shifted out of Park without depressing the brake pedal and/or without having a key in the ignition.Shifting the transmission out of Park when not having the brake pedal depressed can result in a vehicle rollaway. ODI is opening this Recall Query (RQ) to review the effectiveness of the 17V-821 and 18V-100 recall remedies, understand the root cause of additional vehicle rollaway incidents, and identify any other possible root cause that may affect the performance of the BTSI system. To review the ODI reports cited in the Opening Resume ODI Report Identification Number document, go to NHTSA.gov.
Power Train:automatic Transmission:gear Position Indication (prndl)
The Office of Defects Investigation (ODI) has received 14 Vehicle Owner Questionnaire (VOQ) reports and 6 EWR Death & Injury (D&I) reports describing post recall remedy failures of the brake transmission shift interlock (BTSI) system in certain Model Year (MY) 2013-2018 RAM pickup trucks.The subject vehicle models include 1500, 2500, 3500, 4500, and 5500 trucks equipped with a column mounted shift lever.The failures of the BTSI described in the VOQs occurred on vehicles that had all previously been repaired under recall 17V-821 or 18V-100.Both recalls address a potential condition which can cause the BTSI locking pin to become stuck allowing the transmission to be shifted out of Park without depressing the brake pedal and/or without having a key in the ignition.Shifting the transmission out of Park when not having the brake pedal depressed can result in a vehicle rollaway. ODI is opening this Recall Query (RQ) to review the effectiveness of the 17V-821 and 18V-100 recall remedies, understand the root cause of additional vehicle rollaway incidents, and identify any other possible root cause that may affect the performance of the BTSI system. To review the ODI reports cited in the Opening Resume ODI Report Identification Number document, go to NHTSA.gov.
RQ15004 · Software Security Vulnerability
Opened Jul 24, 2015 · Closed Jan 5, 2016
Status: closed (inferred from source dates) · Electrical System:software
On July 23, 2015, Fiat Chrysler Automobiles (FCA) launched Safety Recall 15V-461 to remedy security vulnerabilities in approximately 1.4 million model year (MY) 2013 through 2015 vehicles equipped with Uconnect head units (HU) 8.4A (RA3 radio) and 8.4AN (RA4 radio) manufactured by Harman International.On July 24, 2015, the Office of Defects Investigation (ODI) opened Recall Query, RQ 15-004, to investigate HU security vulnerabilities and remedy effectiveness in the recalled population and to determine whether similar units have been supplied for use in other FCA vehicles.In an August 11, 2015 letter, FCA submitted a second Part 573 safety recall report expanding the scope of the Uconnect RA4 model radio to include additional 7,810 MY 2015 Jeep Renegade vehicles manufactured from September 18, 2014 through June 25, 2015 (Recall 15V-508).Scope analysis indicated that Uconnect radios installed in FCA vehicles not included in recalls 15V-461 or 15V-508 (subject recalls) are not equipped with built-in cellular access or short range wireless communication features and, thus, do not contain the security vulnerabilities addressed by the subject recalls. SUBJECT VEHICLES: MY2014 through 2015 Dodge Durango, Jeep Grand Cherokee and Jeep Cherokee sport utility vehicles; MY2013 through 2015 Ram 1500, 2500, 3500 and 4500/5500 pickup trucks; MY2013 through 2015 Dodge Viper vehicles; and MY2015 Chrysler 200, 300, Jeep Renegade, Dodge Charger and Challenger vehicles.According to FCA, long and short range wireless vulnerabilities identified in the recalled vehicles could allow unauthorized third-party access to, and manipulation of, networked vehicle control systems.Successful exploitation of the vulnerabilities, coupled with reverse engineering of networked microprocessor control modules, could result in unauthorized manipulation of vehicle control systems. This unauthorized manipulation of vehicle controls and systems could expose the driver, vehicle occupants or other highway users to an increased risk of injury.FCA and its network provider, Sprint, conducted a nationwide campaign to block access to a radio communications port that was unintentionally left open.On July 27, 2015, short range wireless vulnerabilities were also blocked.Finally, third party security evaluation and regression testing identified vulnerabilities that were either remedied by Sprint or through updates to the FCA Uconnect software.ODI identified a total of 30 complaints or field reports on unique vehicles submitted by FCA (29) or received by NHTSA (1) alleging incidents of theft from a vehicle or anomalous performance that the owner alleged were caused by, or may have been caused by, remote hacking.Twenty-six (87%) of these reports were submitted after a magazine article was published on July 21, 2015, describing the remote hacking of an FCA vehicle by researchers who were able to affect the operation of various vehicle control systems, including the service brakes, steering, throttle and ignition.Most of the complaints involved vehicle systems that were not safety critical (e.g., complaints related to radio, navigation system, or air-conditioning control) and did not affect vehicle control.Three complaints reported engine stalls.One owner reported sudden unintended acceleration allegedly related to hacking.None of the complaints or field reports reviewed involved the steering and braking vehicle control effects demonstrated by the research hackers prior to the recall.There were no confirmed incidents of hacking in any of the records reviewed by ODI.The remedies completed by Sprint and FCA appear to have eliminated vulnerabilities that mi
Illustration