Incident: BMW Recalls Cars Due to Incorrect Engine Management Software.

Published Date: 2018-02-23

Postmortem Analysis
Timeline 1. The software failure incident with BMW's engine management software happened when BMW announced the recall of 11,700 cars on February 23, 2018, as reported in Article 68868.
System The software failure incident in Article 68868 involved the engine management software of BMW's luxury 5- and 7-Series models. Specifically, the wrong programming was installed on these models, leading to the need for a recall of 11,700 cars [68868]. Therefore, the systems that failed in this software failure incident were: 1. Engine management software of BMW's luxury 5- and 7-Series models [68868].
Responsible Organization 1. BMW (Article 68868)
Impacted Organization 1. Customers who owned the affected BMW 5- and 7-Series models made between 2012 and 2017 [Article 68868].
Software Causes 1. Incorrect programming installed on BMW's luxury 5- and 7-Series models due to a mistakenly assigned software update [68868].
Non-software Causes 1. The incorrect programming installed on BMW's luxury 5- and 7-Series models. 2. The mistakenly assigned software update to certain unsuitable model-versions. 3. The manipulation of emissions of harmful gases like nitrogen oxide, which BMW's management denied but was suggested in a report by news weekly Der Spiegel [68868].
Impacts 1. The software failure incident led to the recall of 11,700 BMW cars to fix their engine management software, affecting luxury 5- and 7-Series models [Article 68868]. 2. The incident raised concerns about potential emissions manipulation, although BMW denied such allegations [Article 68868]. 3. The software failure incident highlighted the ongoing scrutiny and comparison with Volkswagen's "Dieselgate" emissions scandal, which had significant financial implications for VW [Article 68868].
Preventions 1. Implementing rigorous software testing procedures to catch any incorrect programming during development [68868]. 2. Conducting thorough quality assurance checks to ensure the correct software updates are assigned to the appropriate model versions [68868]. 3. Enforcing strict oversight and review processes for software updates to prevent inadvertent errors in deployment [68868].
Fixes To fix the software failure incident where BMW discovered the wrong programming installed on its luxury 5- and 7-Series models, the following actions could be taken: 1. Recall 11,700 cars to fix their engine management software with the correct programming [Article 68868]. 2. Implement a correctly developed software update for the affected model-versions [Article 68868]. 3. Cooperate with relevant authorities on further steps to address the issue [Article 68868].
References 1. Internal tests conducted by the BMW Group 2. Report in news weekly Der Spiegel 3. Statement issued by BMW 4. Relevant authorities mentioned in BMW's statement 5. Comparison with Volkswagen's emissions scandal and settlement 6. Details provided by Reuters journalist Edward Taylor 7. Potential cooperation with authorities mentioned by BMW 8. Mention of high-performance diesel engines and turbo chargers in affected BMW models 9. Financial information related to Volkswagen's settlement and costs mentioned in the article [68868]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization, multiple_organization (a) The software failure incident related to emissions manipulation through software has happened before at another organization, specifically Volkswagen, as mentioned in Article 68868. Volkswagen had admitted to installing "defeat devices" on its diesel models to manipulate emissions tests, leading to the "Dieselgate" scandal. This indicates a similar incident involving emissions manipulation through software within the automotive industry. (b) The software failure incident related to incorrect programming of engine management software has occurred within the same organization, BMW, as reported in Article 68868. BMW had to recall 11,700 cars to fix the wrong programming that was installed on its luxury 5- and 7-Series models. This indicates a recurring issue with software errors within BMW's products.
Phase (Design/Operation) design (a) The software failure incident in Article 68868 occurred during the design phase. BMW mentioned that a correctly developed software update was mistakenly assigned to certain unsuitable model versions, indicating an error in the development process where the wrong programming was installed on the luxury 5- and 7-Series models [68868]. This design flaw led to the need for a recall to fix the engine management software. (b) The software failure incident in Article 68868 does not provide specific information indicating that the failure was due to factors introduced by the operation or misuse of the system.
Boundary (Internal/External) within_system, outside_system (a) within_system: The software failure incident reported in the article is related to the internal tests conducted by BMW, which led to the discovery of the wrong programming installed on certain models of their luxury 5- and 7-Series cars. This indicates that the failure originated from within the system, specifically from the software update that was mistakenly assigned to unsuitable model versions [Article 68868]. (b) outside_system: The article mentions that a report in news weekly Der Spiegel suggested that BMW had installed software that manipulated emissions of harmful gases, which the management of BMW denied. This external suggestion of emissions manipulation could be considered as a contributing factor originating from outside the system, potentially impacting the software failure incident [Article 68868].
Nature (Human/Non-human) human_actions (a) The software failure incident in this case was not due to non-human actions. It was a result of the wrong programming being installed on BMW's luxury 5- and 7-Series models, as discovered during internal tests. The software update was mistakenly assigned to certain unsuitable model versions, indicating a human error in the software development process [Article 68868]. (b) The software failure incident was a result of human actions, specifically the incorrect programming that was installed on the BMW cars. This human error led to the need for a recall of 11,700 cars to fix the engine management software. The mistake in assigning the correct software update to the appropriate model versions was a human error in the development process [Article 68868].
Dimension (Hardware/Software) software (a) The software failure incident in this case was not due to hardware issues but rather due to software issues. BMW announced a recall of 11,700 cars to fix their engine management software after discovering that the wrong programming had been installed on certain models [Article 68868]. This indicates that the failure originated in the software rather than the hardware.
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident reported in Article 68868 is non-malicious. BMW stated that the wrong programming had been installed on its luxury 5- and 7-Series models due to a mistakenly assigned software update during internal tests. There was no indication in the article that the incorrect programming was intentional or maliciously introduced to harm the system. The incident was attributed to a mistake in the software update process rather than any deliberate attempt to manipulate emissions or deceive authorities [68868].
Intent (Poor/Accidental Decisions) poor_decisions, accidental_decisions (a) The software failure incident reported in Article 68868 was related to poor decisions. BMW mentioned that the wrong programming had been installed on its luxury 5- and 7-Series models due to a mistakenly assigned software update. This indicates that the failure was a result of poor decisions made during the software development process [68868].
Capability (Incompetence/Accidental) accidental (a) The software failure incident in this case was not due to development incompetence but rather an accidental mistake. BMW mentioned that a correctly developed software update was mistakenly assigned to certain unsuitable model-versions, indicating that the issue was not due to a lack of professional competence but rather an accidental error [68868].
Duration temporary The software failure incident reported in Article 68868 regarding BMW's engine management software can be categorized as a temporary failure. The article mentions that BMW discovered the wrong programming had been installed on its luxury 5- and 7-Series models during internal tests. This indicates that the failure was due to specific circumstances or errors in the software update process rather than a permanent issue affecting all circumstances [68868].
Behaviour other (a) crash: The software failure incident in the BMW case did not involve a crash where the system lost state and did not perform any of its intended functions. The issue was related to the wrong programming being installed on certain BMW models, leading to a recall for a software fix [68868]. (b) omission: The software failure incident was not characterized by the system omitting to perform its intended functions at an instance(s). Instead, the issue was attributed to the incorrect programming that was installed on the affected BMW 5- and 7-Series models [68868]. (c) timing: The failure was not due to the system performing its intended functions correctly but too late or too early. The issue was related to the wrong programming being installed on specific BMW models, leading to the need for a software update [68868]. (d) value: The software failure incident was not a result of the system performing its intended functions incorrectly in terms of providing incorrect outputs or results. The issue was specifically related to the incorrect programming installed on certain BMW models [68868]. (e) byzantine: The failure was not characterized by the system behaving erroneously with inconsistent responses and interactions. The issue with the BMW models was related to the wrong programming being assigned to unsuitable model versions, leading to the need for a recall and software update [68868]. (f) other: The software failure incident in the BMW case can be categorized as an error in software development and deployment, where the wrong programming was mistakenly assigned to certain model versions, causing a need for a recall to fix the issue [68868].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence harm, property, non-human, theoretical_consequence The consequence of the software failure incident reported in the article [68868] was related to the potential harm caused by the manipulation of emissions of harmful gases such as nitrogen oxide due to the wrong programming installed on BMW's luxury 5- and 7-Series models. The article mentioned that BMW had mistakenly assigned a correctly developed software update to certain unsuitable model versions, which could have led to emissions manipulation. This situation raised concerns similar to the "Dieselgate" emissions scandal involving Volkswagen, where the use of "defeat devices" on diesel models had serious consequences, including fines and related costs amounting to billions of euros [68868].
Domain transportation, manufacturing (a) The failed system in the reported incident was related to the automotive industry, specifically affecting German carmaker BMW's luxury 5- and 7-Series models due to incorrect engine management software programming [Article 68868].

Sources

Back to List