KARR Issues Patch for Bluetooth Flaw Exposing 2.2 Million Vehicles to Theft Risk
Updated
Updated · Fox News · Jul 31
KARR Issues Patch for Bluetooth Flaw Exposing 2.2 Million Vehicles to Theft Risk
2 articles · Updated · Fox News · Jul 31
Summary
Acrisure released a firmware update on July 20 for dealer-installed KARR and SWDS modules after UC San Diego researchers found a Bluetooth flaw affecting about 2.2 million vehicles.
Within roughly five yards, an attacker could use a shared authentication key to unlock doors, disable alarms, flash lights, sound the horn or block a parked car from starting.
The vulnerability does not let an attacker start the engine or stop a moving vehicle, but researchers said quietly unlocking doors could enable follow-on theft methods and location tracking through Bluetooth signals.
KARR said only a small percentage of its devices with certain Bluetooth components were affected and that it has not seen real-world exploitation; owners can check their VIN and install the patch through the official KARR Security app.
Because the hardware was often added by dealerships—sometimes even when buyers declined the service—the risk extends across brands and depends more on the selling dealer than the automaker.