Millions of drivers with a dealer-installed KARR alarm should download the iPhone app and install the latest firmware update now, because a security flaw can let nearby attackers unlock or immobilize more than two million vehicles.
Bluetooth vulnerability
Bluetooth vulnerabilityThe affected KARR Security System is an aftermarket alarm that dealerships install to protect vehicles on their lots. Dealers often leave the hardware connected after a vehicle is sold, even when the buyer declines to pay for the alarm service.
The vulnerability affects dealer-installed KARR hardware, not the automakers’ factory systems. It doesn’t affect Apple CarPlay, the iPhone-to-car connection or Apple’s software.
Because KARR is third-party equipment, automakers can’t distribute the fix through their usual software update systems. The unusual arrangement places the problem outside the normal vehicle security process.