A significant security flaw in popular aftermarket car alarm systems could leave millions of vehicles vulnerable to hijacking, according to new research from the University of California San Diego (UCSD). The study reveals that KARR/SWDS security systems, widely installed by car dealers across California, all utilise an identical 'secure key' for their Bluetooth communication, making them susceptible to unauthorised access.
The researchers demonstrated that this shared key allows anyone within Bluetooth range to potentially connect to a vulnerable vehicle's security system. Once connected, an attacker could disable the alarm, unlock doors, and even start the engine, effectively enabling car theft or remote interference with the vehicle's functions. The discovery raises serious concerns for vehicle owners who have these systems installed, as it bypasses traditional security measures.
These KARR/SWDS systems are typically added by dealerships as an optional security upgrade, rather than being part of the manufacturer's standard vehicle package. This widespread installation practice, particularly in California, means a large number of car owners could be unknowingly at risk. The UCSD team's findings highlight a critical oversight in the design and implementation of these aftermarket solutions, where standardisation for ease of deployment has inadvertently created a massive security loophole.
While the research specifically focused on systems prevalent in California, the implications could extend further if similar security system designs are used elsewhere. The study, which has been peer-reviewed, underscores the growing importance of scrutinising the security of all vehicle components, not just those integrated by manufacturers. It also serves as a stark reminder that convenience in mass deployment should never come at the expense of robust security protocols.
The researchers have urged owners of vehicles fitted with KARR/SWDS systems to contact their dealerships for advice on potential mitigation or removal. The full extent of vehicles affected is still being assessed, but given the popularity of these dealer-installed options, the numbers are expected to be substantial.