US Researchers Discover Bluetooth Hacking Risk in Dealer-Installed Vehicle Security Devices

Approximately 2.2 million vehicles worldwide are at risk of theft due to a simple Bluetooth hack. Researchers at the University of California, San Diego (UCSD), have discovered Bluetooth vulnerabilities in dealer-installed vehicle security devices, specifically 'KARR' and 'SWDS'.

Attackers exploiting this flaw can access unauthorized vehicle control functions via Bluetooth within approximately 4.5 meters (5 yards) of the car. This includes unlocking doors, disabling alarms, sounding the horn, and flashing headlights. While there is a risk that a compromised device could prevent a parked vehicle from starting, researchers clarified that this vulnerability cannot disable the engine of a moving vehicle.

KARR and SWDS are aftermarket devices added by dealers beneath the dashboard after the sale, rather than being installed by the vehicle manufacturer. Owners can determine if their vehicle is equipped with these devices by checking for stickers on the driver's side window or inspecting the internal device.