Date: 2021-12-23
Generic Manufacturer
NHTSA Action Number: DP21005
Components: ELECTRICAL SYSTEM:CYBERSECURITY
Subject:
SAE J1939 Data Bus Vulnerability
Opened From: 2021-12-23 - 2022-02-07
Summary
In a letter dated September 27, 2021, Mr. James Lamb, Executive Director of the Small Business in Transportation Coalition (SBTC), petitioned the National Highway Traffic Safety Administration (NHTSA), requesting the initiation of a defect investigation into the potential hacking susceptibility of the Society of Automotive Engineers (SAE) J1939 Data Bus standard. SAE J1939 is the vehicle bus recommended practice used for communication and diagnostics among vehicle components. In support of the petition, the petitioner cited a study from University of Michigan (Michigan) researchers alleging a SAE J1939 Data Bus vulnerability in a Model Year (MY) 2001 school bus and a MY 2006 Class-8 semi-tractor. The study alleges that, due to the vulnerability, vehicle critical safety functions such as the accelerator control or braking systems are susceptible to unauthorized access and control and increases risk to motor vehicle safety. On December 23, 2021, the Office of Defects Investigation (ODI) opened DP21-005 to evaluate the petitioner's request. The petitioner did not specify the make and model of the vehicles with the alleged safety defect. The only categories of relevant vehicles specified were found in the study: MY 2001 school buses and MY 2006 Class-8 semi-tractors. ODI has not received any complaints of any type related to this alleged vulnerability (The single complaint identified above is the petition.). This evaluation included searches of complaints from vehicle owners, operators, and fleet supervisors.Further, based on the available information, ODI has not found any similar events/complaints/allegations suggesting a real-life vulnerability. The vehicle compromises reported in the Michigan study required physical access to the J1939 connector in order to affect vehicle critical safety functions such as the accelerator control or braking systems. Whether there is a potential for remote compromise is a factor that NHTSA has considered in evaluating the likelihood or frequency of a potential safety defect. The Michigan study did not demonstrate a remote compromise of these vehicles. In addition, based on the age of the subject model year school buses and semi-tractors, they do not have over-the-air software update capabilities/internet connection to make remote compromise possible. Therefore, given a thorough analysis of the potential for finding a safety-related defect in the subject vehicles, and in view of NHTSA?s enforcement priorities, a defects investigation is unlikely to result in a finding that a defect related to motor vehicle safety exists. NHTSA is authorized to issue an order requiring notification and remedy of a defect if the Agency's investigation shows a defect in the design, construction, or performance of a motor vehicle that presents an unreasonable risk to safety (49 U.S.C. ?? 30102(a)(9), 30118).Given the absence of any similar events/incidents related to this matter and lack of demonstrated potential for remote compromise, it is unlikely that an order concerning the notification and remedy of a safety-related defect would be issued due to any investigation opened as a result of granting this petition. Therefore, upon full consideration of the information presented in the petition, and the potential risks to safety, the petition is denied. The denial of this petition does not foreclose the Agency from taking further action if warranted, or the potential for a future finding that a safety-related defect exists based upon additional information the Agency may receive. A notice of denial of this petition will be published in the Federal Register.
Investigation Documents
For Latest Documents related to this Investigation, visit the NHTSA Website.
Click the (+) Plus Sign
Then click Associated Document(s).
Search NHTSA Database for Recalls
Search NHTSA Database for (TSB's) Technical Service Bulletins
Technical Service Bulletins TSB's List
Previous Investigation | Next Investigation |
- [Notice] When you receive a used device, it may be a customer return resold by Amazon without inspection. You can exchange it for a new one through Amazon. As this situation is unavoidable, we sincerely apologize. For any issues, contacting us via Amazon's "Messages" is the best way. THINKSCAN 689BT Bidirectional Scan Tool Can Be Used Immediately After It is Turned On, Without Complicated Registration Process, Which is More Convenient & Quick.
- Full Bi-Directional Control & 3000+ Active Tests: Take control and test components like actuators, fuel injectors, relays, and cooling fans in real time. You’ll quickly see if the problem is in the part itself or the control module — saving you hours of guesswork and frustrating trial-and-error.
- Advanced ECU Coding Capabilities: Handle module matching and hidden feature activation with confidence. When you replace an ECU or want to customize settings, this obd2 scanner diagnostic bi directional tool gives you the professional-level capabilities you need without the dealership price tag.
- 34+ Useful Reset and Maintenance Functions: Complete everyday service tasks smoothly with a wide range of helpful reset and maintenance functions. Whether you’re keeping up with regular upkeep or tackling a specific job, this scanner makes maintenance simpler and less stressful for both DIYers and pros.
- Comprehensive Full System Diagnostics: Diagnose every major system — Engine, Transmission, ABS, SRS, TPMS, and more — all in one place. Finally stop wondering if you’re missing something important; get the full picture and clear codes with ease.
- Top Reasons to Choose the D7S OBD2 Scanner: XTOOL D7S car scan tool, an upgrade of XTOOL D7, offers comprehensive features for automotive technicians, workshops, and DIY enthusiasts 1. Upgraded Hardware: 2+64GB memory, rear camera, intuitive interface, foldable bracket 2. Complete Diagnostics: FCA
Autoauth, OE-level all system scan, 39+ maintenance services, 4K+ bidirectional, CANFD/DoIP protocol 3. Advanced Capabilities: ECU c0ding, PMI functions 4. Wide Compatibility: Support 10,000+ models, covering 99% vehicle brands 5. Multi-language: Available in 22+ languages, No IP Restrictions 6. 3-Year Updates: Save 300 bucks on software updates for the latest features and optimizations - 2026 Upgraded D7S Car Scanner Features: The newly 2026 D7S V2.0 scanner for car brings exciting features for advanced vehicle diagnostics and enhanced user experience 1. FCA AutoAuth: Now supports FCA SGW module for Chrysler, for Jeep, for Dodge (2018+), for Fiat (2017+), enabling faster vehicle communication without gateway restrictions 2. PMI (Offline ECU Pr0gramming): Allows for Ford, for Lincoln, and for Mazda ECU pr0gramming for new modules 3. Optimized Diagnostic Report 2.0: Personalized reports with logos and customer info for auto shops. Note: Compatibility varies by cars, please check before order
- 39+ Services/Resets/Adaptations/Relearns/Calibrations: XTOOL D7S full system car scanner diagnostic tool tackles 99% of common car issues through its 36+ special functions, including Oil Reset, EPB, SAS, BMS, Throttle Reset, Injector C0ding, ABS Bleed, TPMS Reset, Power Balance, etc and also covers specific-vehicle functions like Crank Sensor Relearn, ABS Initialization, Cylinder Power Balance, Fuel Trim Reset, Idle Relearn etc. This car diagnostic scanner enhances efficiency, making repairs and maintenance hassle-free. Tip: DO NOT for All vehicles, please check compatibility first
- Cost-effective ECU C0ding Scan Tool for Specific Brands: Enhance your vehicle's performance with XTOOL D7S! This obd2 scanner all systems bidirectional offers advanced capabilities at an affordable price, supports online for BMW, for Benz and offline for BENZ, for MIT, along with PMI functions for Ford, for Mazda, and for Lincoln
. Ideal for technicians and DIY enthusiasts, this automotive scanner diagnostic tool optimizes vehicle performance and enhances the driving experience. Note: Not for all cars and modules, please send car VIN to check the compatibility before purchase - OE All System Diagnostic & 8 Pids Graphing: XTOOL D7S is a comprehensive all system bi directional obd2 scanner that delivers dealer-level diagnostics, completely controlling over your vehicle’s performance and health. This automotive scan tool can read and clear DTCs, view live data and ECU information, retrieve freeze frames, and perform active tests and full obd2 functions. This bi-directional scan tool can can identify your vehicle's make, model, and year information with just one click and show up to 8 PIDs live data with options for CSV viewing, playback, and recording for in-depth analysis. It is easy-to-use for both professionals and beginners, helping pinpoint issues efficiently
- 【✅Compared to BOSSCOMM IF742, IF745 Offers Full-System Diagnostics】The BOSSCOMM IF745 car diagnostic scanner is an upgraded model of IF742. In addition to supporting all OBD2 Code Reader functions and 6 reset options (ABS/EPB/SAS/BMS/Oil/Throttle), it expands diagnostics from 4 systems (Check Engine/ABS/SRS/Transmission) to vehicle All systems, including Steering, Suspension, and Body Electronics. This provides deeper, more comprehensive diagnostic capabilities.
- 【✨10 OBD2 Functions】The BOSSCOMM IF745 scan tool’s DTC Lookup instantly translates fault codes into user-friendly explanations, its I/M Readiness feature streamlines emissions testing with a single tap, and Freeze Frame lets you pinpoint the exact moment of a fault for in-depth root-cause diagnosis. Combined with a live data dashboard and advanced diagnostics (O2S, OBMon, EVAP), it delivers comprehensive insights for confident troubleshooting.
- 【✨Deep Diagnostics for All Vehicle System Modules】Beyond code reading/clearing and ECU information retrieval, our all-in-one data stream feature lets you inspect all current fault codes and their locations across the vehicle’s systems. This vehicle code reader helps you turn off dashboard warning lights and perform a comprehensive self-check of your car at home—no more back-and-forth trips to the repair shop or hefty inspection fees.
- 【✨6 Essential Resets: ABS Bleeding, Oil, EPB, SAS, Throttle, BMS】The BOSSCOMM IF745 obd2 scanner diagnostic tool swiftly purges air from brake lines to restore braking sensitivity, fine-tunes maintenance cycles to eliminate false alerts, resolves parking brake issues with one-click control, recalibrates steering sensors for stability, optimizes engine idling/acceleration for smoother performance, and deeply resets battery systems to extend lifespan and range via precise parameter adjustments.❗NOTE: Does NOT support bidirectional control, coding, or programming.
- 【✨10,000+ Car Models, AutoVIN, 13 Languages】The BOSSCOMM IF745 vehicle scanner diagnostic tool covers 73+ global car brands and offers support in 13 languages, making it perfect for DIYers, auto mechanics, or as a thoughtful gift. With a single-click AutoVIN feature, it instantly retrieves vehicle serial numbers, streamlining diagnostics for users globally. This adaptable tool balances user-friendliness with precision, catering to both personal and professional requirements.✅Unsure about compatibility? Compatibility will vary on vehicles' model and year, pls reach us via 📧 [email protected] 📧 before purchase.
This product presentation was made with AAWP plugin.