Bluetooth flaw in Karr car alarms could unlock doors and disable engines
UCSD researchers uncovered a Bluetooth vulnerability in Karr Security Systems used in about 2 million vehicles via dealers, which could let attackers unlock doors, disable ignition, and tamper with a car. Karr released a firmware patch accessible through a free companion app, but the risk persists for vehicles not updated. The issue is compounded by dealers who sometimes install Karr and leave it active unless buyers opt in for ongoing monitoring; presence can be spotted by stickers reading Karr or SWDS. Some experts say the real-world risk is significant, prompting calls for mandate-to-remove unsold alarms at point of sale while acknowledging Karr’s stated low risk.