[Jason]

BIMMERPOST NEWS

BMW Offers Fix to Prevent Key Cloning Theft

44
COMMENTS

Tweet

Recall the stolen 1M coupe video and rash of stolen BMWs in the UK that we reported on in July? BMW has begun releasing fixes to prevent the high tech thefts which used a method of cloning keys on the spot (by NFC key programming devices). In short, the car thieves broke into the car, accessed the BMW OBD port, and programmed a blank NFC key via a key programmer.

Models produced from 2007 to September 2011 are vulnerable to process, but BMW has just released a software upgrade for affected X5 and X6 models. Software updates for other affected models will be available in approximately 8 weeks.

A BMW spokesman confirmed that the upgrade will be carried out by dealers free of charge. Owners with affected cars should contact their BMW UK dealers or call BMW's UK hotline on 0800 083 4397.

No announcement yet from BMW NA on the software update.

Source: Autoexpress

[jhv]

i know this is a bit of a stretch, but could they implement some sort of countermeasure that disables all obd access if a window is broken with the car locked?

[dtwyim]

Only in UK?

[XMetal]

Originally Posted by dtwyim

Only in UK?

Exactly...Aren't North American models also affected by this vulnerability? What is BMW doing for the NA market?

[dreadnaxt]

what's about Europe also?

[JoeyBananaz18]

Originally Posted by XMetal

Exactly...Aren't North American models also affected by this vulnerability? What is BMW doing for the NA market?

My thinking exactly. Is there a difference between the NA and EU obd?

[Mike Benvo]

Originally Posted by XMetal

Exactly...Aren't North American models also affected by this vulnerability? What is BMW doing for the NA market?

All cars should be affected. I have updated a few of them remotely with the update that prevents the key pairing process. This was just recently released in the last couple months.

[makkan00]

Guys, we Uk BMW customers are working on this since last year.
BMW constantly denied it and finally after these videos and strong letters to media brought this into attention.
Finally BMW agreed and rolled the update but it is available for X5-6 at the moment.
They are on a process of rolling software for 3 series.
I suggest all of you in different countries, start raising this so BMW should provide this update for free.

[makkan00]

Originally Posted by Mike Benvo

All cars should be affected. I have updated a few of them remotely with the update that prevents the key pairing process. This was just recently released in the last couple months.

Mike, I know you well and you have good repo.
Can you tell me what are you referring to?
As far as I know it is not covered in SP daten 46.
SP daten 47 is out. Are you referring to that?

[v1k0d3n]

call me sally and slap me silly, but why should it be any different of a process only to provide this to the UK and not the other markets? this makes me a tad bit upset (so only the squeaky wheel get's the grease)?

seems like BMW only responded because of the pressure and not because they feel it's a priority. it will really bother me if this "update" is only provided to UK customers and if it impacts all markets.

[Diver]

At least my car was built after September, 2011.

[richb811]

Yep, everyone needs to make a stink about this. BMW should be providing this update to all affected markets.

[Th3xf4ctor]

Originally Posted by Rich@GTBPerformance

Yep, everyone needs to make a stink about this. BMW should be providing this update to all affected markets.

Agreed, I do not understand why they think this is only an issue in the UK...It's a problem in every BMW EVERYWHERE

[r3dbimmer89]

I read somewhere that it only affects RHD markets because the motion sensor has a blind spot with the OBD port being down low on the right side of the vehicle... Even though that still sounds like a bunch of BS because they can still code a new key with the alarm going off.

[obert]

It would be nice if BMW would send out a notice to bring our vehicle in for this update.

I know looooooooooooooooooooooong shot

[Legion5]

Originally Posted by r3dbimmer89

I read somewhere that it only affects RHD markets because the motion sensor has a blind spot with the OBD port being down low on the right side of the vehicle... Even though that still sounds like a bunch of BS because they can still code a new key with the alarm going off.

Not everyone has an alarm.

[ozinaldo]

How difficult is it to release a full explanation of which models in which markets are vulnerable and others are not? I mean, everyone who has a BMW whether in UK or not, whether right hand drive or not should know clearly if their car is among the ones which would need a software fix and the reasons of it. Untill now the way that BMW handles this issue is disappointing to say the least and hurting their global image. The release of the recent "fix" with such insufficient information just worsens this fact.

[///Mposter]

Someone needs to steal one of BMWs prototypes this way or wipe a dealer clean and place all the cars on the lot at another location like a walmart . Put up a vid on the tube of all of them in a row and wait for the fix.

[carl_d]

In Europe the OBD port was "opened up" for non-BMW dealers/shops to service our cars. This was driven by EU legislation to promote a competitive car servicing market (thanks for that EU). So this must be a European-wide problem! Not sure if the US market has opened up OBD in the same way - I think you guys have but not sure if it went this far?

BTW other brands are likely affected but BMW's have been targeted in the UK due to the high proposition of M-Sport models. The M-Sport cars are broken up for parts and sold on the market outside the UK as upgrades.

[bimmerjph]

Originally Posted by XMetal

Exactly...Aren't North American models also affected by this vulnerability? What is BMW doing for the NA market?

My guess would be waiting until its too late (someone's car gets stolen).

[JB135MDCT]

just add a switch to the obd write line.

[J Lau]

NICE!
Finally!!