BMW’s Connected Drive system as leaky as a basket?

Posted on 30-01-2015 at 18:32 by MauritsH – 38 Comments”

Kacke am Dampfen!

By Connected Drive BMW cars communicate wirelessly with the factory and can have different functions with a smartphone app (to open the doors, sounding of the horn, etc.) be controlled. The German ADAC was interested in finding out what info exactly to Munich is sent, but from the results of the executed tests showed that the system is fairly easy to hack.

With a little bit of preparation, a smartphone and 2 minutes, patience is already in Connected Drive to break in without a trace to leave behind. The problem is spread across a whopping 2.2 million cars from the BMW group (BMW, Rolls-Royce and MINI) and the Bavarian brand has already indicated that the loopholes in the system tomorrow poem.

A list with the cars with the above issue, check below.

BMW
1-series, incl. Cabrio, Coupé and Touring (E81, E82, E87, E88, F20, F21)
2 series, incl. Active Tourer, Coupé and Convertible (F22, F23, F45 )
3-series, incl. Cabrio, Coupé, GT, M3 and Touring (E90, E91, E92, E93, F30, F31, F34, F80)
4-series Coupé, Cabrio, GranCoupé and M4 (F32, F33, F36, F82, F83)
5-series, incl. GT and Touring (E81, E82, F07, F10, F11, F18)
6-series, incl. Cabrio and GranCoupé (F06, F12, F13)
7-series (F01, F02, F03, F04)
I3 (I01), I8 (I12)
X1 (E84), X3 (F25), X4 (F26) X 5 (E70, F15, F85), X6 (E71, E72, F16, F86), Z 4 (E89)

Mini
3-door and Countryman (F56, F60)

Rolls Royce
Phantom, incl. Coupé and Drophead Coupé (RR1, RR2, RR3)
Ghost (RR4)
Wraith (RR5)

Cars on or after 9 december 2014, built his spring dance and walk, no security risks. Owners of cars of that date can be a wireless update, expect that to solve the problem.