It was brought to our attention at the end of last week that there is a possibility that the Wi-Fi system installed in the Mitsubishi Outlander PHEV can be accessed using the Mobile App without authorisation from the vehicle’s owner. We take this matter very seriously and are actively working with all parties to better understand and resolve the issue.
This ‘hacking’ can only occur when within range of the vehicle’s Wi-Fi. Once the hacking has taken place, it is possible for the alarm to be deactivated. Even if the alarm were deactivated the vehicle remains locked and secure. In this state, however, should someone try to gain entry to the vehicle by forced access, the alarm would not sound.
At this early stage, until further technical investigation has taken place, we would recommend that the Wi-Fi is deactivated using the ‘Cancel VIN Registration’ option on the app, or by using the remote app cancellation procedure. All devices paired to the vehicles Wi-Fi using the PHEV App must be deleted. Once all paired devices are unpaired/deleted from the Wi-Fi module, the Wi-Fi module will effectively go to sleep, eliminating any risk.
