Tech

Mitsubishi Outlander PHEV SUV Could Be Easy To Steal With Flawed WiFi Feature

Brian McNeill
First Posted: Jun 07, 2016 06:10 AM EDT

The Mitsubishi Outlander PHEV SUV has reported a potential breach that could affect the car’s alarm using the faulty onboard WiFi system. For now, Mitsubishi recommends turning off the onboard WiFi until the issue has been resolved.

New cars such as the Mitsubishi Outlander PHEV SUV carry a ton-load of new features, something expected with the advancements of technology. But just like other technology-driven devices, the adaptation of advanced features may not necessarily turn out for the greater good.

Such is the case for the Mitsubishi Outlander PHEV SUV which, according to reports, is allegedly armed with a flawed WiFi system that could eventually become a gateway for thieves through hacking. With that access point, thieves can get as far as deactivating the vehicle’s alarm and taking control with some hacking expertise.

The vulnerability was brought out in the open by a security expert named Ken Munro. He came across an unusual WiFi access point which popped up on his smartphone. It turns out that the WiFi access point was for a nearby Mitsubishi Outlander which fortunately belonged to a friend of his.

The friend eventually showed him the associated app and would later on find out how it could help control certain aspects of the vehicle. But at the end of it all, Munro found some vulnerabilities and eventually stopped.

The whole thing spurred up his curiosity and eventually got a Mitsubishi Outlander PHEV SUV of his own though it was not likely because he wanted to get to the bottom of the WiFi flaw. Regardless, it gave him an opportunity to look into that WiFi flaw which used a web-based app service that supports connected cars.

Among the things that could be done on it included lock/ unlock the vehicle or even starting/stopping the engine. In all, those privileges could be done when commands are sent to a car pass through the servers before eventually being sent to the car using the mobile network.

With the growing concern tied up with online hacks and breaches, the whole app-controlling issue offers a potential threat to people and their cars. Hackers and thieves may eventually find a way to steal the vehicle though a short-term solution was made – turning off the WiFi feature until Mitsubishi is able to find a fix to the problem.

So how about a long-term fix?

"New firmware should be deployed urgently to fix this problem properly, so the mobile app can still be used," said Munro via BBC.

See Now: NASA's Juno Spacecraft's Rendezvous With Jupiter's Mammoth Cyclone

More on SCIENCEwr