Incident: Tesla Model S Fire in Shanghai Due to Battery Module Failure

Published Date: 2019-06-28

Postmortem Analysis
Timeline 1. The software failure incident with the Tesla Model S catching fire in Shanghai happened on April 21, as reported in Article 86628.
System 1. Battery module located at the front of the vehicle [86628]
Responsible Organization 1. A single battery module was responsible for causing the software failure incident in the Tesla car in Shanghai [Article 86628].
Impacted Organization 1. Tesla Inc was impacted by the software failure incident as a single battery module caused a car to catch fire in Shanghai, leading to the company revising its vehicle settings and issuing an over-the-air software update to protect its batteries [86628].
Software Causes 1. The software causes of the failure incident were related to the battery and thermal management settings on Tesla's Model S and Model X vehicles, which were revised via an over-the-air (OTA) software update to further protect the battery and improve battery longevity [86628].
Non-software Causes 1. The failure incident was caused by a single battery module located at the front of the vehicle in the Tesla car that caught fire in Shanghai [Article 86628].
Impacts 1. The software failure incident involving a single battery module causing a Tesla car to catch fire in Shanghai led to Tesla revising its vehicle settings to further protect its batteries [Article 86628]. 2. As a result of the incident, Tesla conducted an investigation and analysis of the battery, software, manufacturing data, and vehicle history to identify the root cause [Article 86628]. 3. Tesla implemented an over-the-air (OTA) software update to revise the charge and thermal management settings on Model S and Model X vehicles to enhance battery protection and improve battery longevity [Article 86628].
Preventions 1. Implementing rigorous software testing procedures to detect any potential issues before deployment [86628]. 2. Conducting thorough risk assessments on software updates to ensure they do not introduce vulnerabilities that could lead to incidents [86628]. 3. Enhancing monitoring systems to detect anomalies in battery and thermal management settings that could trigger safety concerns [86628].
Fixes 1. Tesla revised the charge and thermal management settings on Model S and Model X vehicles via an over-the-air (OTA) software update to help further protect the battery and improve battery longevity [86628].
References 1. Tesla Inc's Weibo social media account 2. Statement released by Tesla Inc 3. Statement released by Nio Inc on Weibo 4. Chinese industry ministry [86628]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization, multiple_organization (a) The software failure incident related to Tesla catching fire in Shanghai due to a single battery module issue led to Tesla revising its vehicle settings and implementing an over-the-air (OTA) software update to improve battery protection [86628]. (b) The incident involving Tesla's fire in Shanghai prompted Nio Inc, a local competitor, to acknowledge potential safety issues with some battery modules in its cars as well. Nio Inc announced a recall of 4,803 units after experiencing three fire incidents in China, indicating a similar issue with battery safety in electric vehicles [86628].
Phase (Design/Operation) design (a) The article mentions that Tesla revised the charge and thermal management settings on Model S and Model X vehicles via an over-the-air (OTA) software update to help further protect the battery and improve battery longevity [86628]. This indicates that the software update was related to the design phase, where changes were made to the system settings to prevent similar incidents in the future. (b) The incident of a Tesla Model S catching fire in Shanghai was attributed to a single battery module, and the investigation found no system defect. This suggests that the failure was not due to the operation or misuse of the system but rather a specific component issue related to the battery module itself [86628].
Boundary (Internal/External) within_system (a) within_system: The software failure incident involving a Tesla Model S catching fire in Shanghai was attributed to a single battery module located at the front of the vehicle. Tesla conducted an investigation into the battery, software, manufacturing data, and vehicle history, finding no system defect. As a response, Tesla revised the charge and thermal management settings on Model S and Model X vehicles through an over-the-air (OTA) software update to enhance battery protection and longevity [86628]. (b) outside_system: The article does not mention any contributing factors originating from outside the system that led to the software failure incident.
Nature (Human/Non-human) non-human_actions (a) The software failure incident in the Tesla car catching fire in Shanghai was attributed to a single battery module located at the front of the vehicle, which caused the incident. Tesla conducted an investigation into the battery, software, manufacturing data, and vehicle history, and found no system defect. The company revised the charge and thermal management settings on Model S and Model X vehicles through an over-the-air (OTA) software update to further protect the battery and improve battery longevity [86628]. (b) The article does not mention any human actions contributing to the software failure incident.
Dimension (Hardware/Software) hardware, software (a) The software failure incident related to hardware: - The article mentions that a single battery module located at the front of the vehicle caused the incident of a Tesla Model S catching fire in Shanghai [86628]. - Tesla revised the charge and thermal management settings on Model S and Model X vehicles via an over-the-air (OTA) software update to further protect the battery and improve battery longevity [86628]. (b) The software failure incident related to software: - The investigation conducted by Tesla included analysis of the battery, software, manufacturing data, and vehicle history, with the findings indicating no system defect and attributing the incident to a single battery module [86628]. - Tesla revised the charge and thermal management settings on Model S and Model X vehicles via an over-the-air (OTA) software update to enhance battery protection and longevity [86628].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident in the article is non-malicious. Tesla stated that the incident where a Tesla Model S caught fire in Shanghai was caused by a single battery module, and the investigation found no system defect. Tesla revised the charge and thermal management settings on Model S and Model X vehicles via an over-the-air (OTA) software update to further protect the battery and improve battery longevity [86628].
Intent (Poor/Accidental Decisions) unknown The articles do not mention any software failure incident related to poor decisions or accidental decisions.
Capability (Incompetence/Accidental) unknown (a) The software failure incident in the Tesla car catching fire in Shanghai was not attributed to development incompetence. The investigation conducted by Tesla found no system defect and concluded that the incident was caused by a single battery module, not by any software development incompetence [86628]. (b) The incident of the Tesla car catching fire in Shanghai was not directly attributed to accidental factors. The investigation by Tesla revealed that the fire was caused by a single battery module located at the front of the vehicle, indicating a specific component failure rather than an accidental introduction of a software flaw [86628].
Duration temporary The software failure incident mentioned in the article is related to a Tesla car catching fire in Shanghai due to a single battery module issue. Tesla conducted an investigation and analysis of the battery, software, manufacturing data, and vehicle history. The investigation found no system defect, and the incident was attributed to a single battery module. Following the incident, Tesla revised the charge and thermal management settings on Model S and Model X vehicles via an over-the-air (OTA) software update to enhance battery protection and longevity [86628]. Based on the information provided in the article, the software failure incident in this case appears to be temporary, as it was specifically linked to a single battery module issue and was addressed through a software update to improve battery protection.
Behaviour value (a) The article mentions that a parked Tesla Model S caught fire in Shanghai on April 21 due to a single battery module issue, leading to a software update to protect the batteries [86628]. (b) The investigation into the incident found no system defect, indicating that the software did not omit to perform its intended functions [86628]. (c) The software update mentioned in the article aimed to revise the charge and thermal management settings on Model S and Model X vehicles, suggesting a timing issue in the previous settings that needed adjustment [86628]. (d) The incident was caused by a single battery module issue, indicating that the software was not performing its intended functions correctly in managing that specific module [86628]. (e) The article does not mention any erratic or inconsistent behavior of the software that would classify as a byzantine failure [86628]. (f) The other behavior observed in this incident is the proactive response by Tesla to address the software-related issue by implementing an over-the-air software update to enhance battery protection and longevity, indicating a preventive measure taken by the company [86628].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence harm, property (b) harm: People were physically harmed due to the software failure The software failure incident involving a Tesla vehicle catching fire in Shanghai resulted in physical harm. The incident caused a fire in a parked Tesla Model S on April 21, leading to potential harm to individuals or property [Article 86628].
Domain transportation, health (a) The failed system in the incident was related to the transportation industry as it involved a Tesla Model S catching fire in Shanghai [Article 86628]. (j) The incident also highlighted safety concerns in the electric vehicle industry, which is part of the health industry due to its impact on public safety and well-being [Article 86628].

Sources

Back to List