Incident: Ford Recall: Engine Failsafe and Tire Pressure Monitoring System Issues

Published Date: 2020-10-19

Postmortem Analysis
Timeline 1. The software failure incident involving the buggy engine failsafe in the Transit Connect van and the wonky tire pressure monitoring system in the Escape compact crossover happened when Ford announced two new recalls affecting these vehicles [106922]. 2. The article was published on 2020-10-19. 3. Therefore, the software failure incident likely happened around October 2020.
System 1. Engine failsafe system in the Transit Connect vans [106922] 2. Tire pressure monitoring system in the Escape compact crossover SUVs [106922]
Responsible Organization 1. Ford [106922]
Impacted Organization 1. Ford - The software failure incident impacted Ford vehicles, specifically the Transit Connect van and the Escape compact crossover [106922].
Software Causes 1. The software cause of the failure incident for the Transit Connect van recall was a buggy engine failsafe that allowed engine temperatures to rise past safe values, potentially leading to engine damage and an increased risk of fire [106922]. 2. The software cause of the failure incident for the Escape compact crossover recall was a malfunctioning tire pressure monitoring system that failed to catch low tire pressures, which could result in decreased handling performance and an increased risk of a crash [106922].
Non-software Causes 1. Engine failsafe issue in Transit Connect vans leading to engine temperature rise and potential fire risk [106922]. 2. Wonky tire pressure monitoring system in Escape SUVs not catching low tire pressures, affecting handling performance and crash risk [106922].
Impacts 1. Engine damage and increased risk of fire due to a buggy engine failsafe in 2,903 Ford Transit Connect vans [106922]. 2. Decrease in handling performance and increased risk of a crash in 689 Ford Escape compact crossovers due to a wonky tire pressure monitoring system [106922].
Preventions 1. Implementing thorough testing procedures during the software development phase to catch bugs and issues before the product is released [106922]. 2. Conducting regular software updates and maintenance to address any potential vulnerabilities or bugs that may arise over time [106922]. 3. Enhancing quality control measures to ensure that critical systems like engine failsafes and tire pressure monitoring systems are functioning correctly [106922].
Fixes 1. Updating the powertrain control module for the Transit Connect vans to ensure the engine doesn't overheat [106922]. 2. Replacing the body control module for the Escape SUVs to address the tire pressure monitoring system issue [106922].
References 1. Ford's official recall announcement [106922]

Software Taxonomy of Faults

Category Option Rationale
Recurring unknown (a) The article does not mention any previous incidents of software failure within Ford or with its products and services, so there is no evidence of a similar incident happening again at the same organization [106922]. (b) The article does not provide information about similar incidents happening at other organizations or with their products and services, so there is no evidence of a similar incident happening again at multiple organizations [106922].
Phase (Design/Operation) design, operation (a) The software failure incident related to the design phase is evident in the article. In the case of the Ford recalls mentioned, the Transit Connect vans experienced a buggy engine failsafe that could allow engine temperatures to rise past safe values, potentially leading to engine damage and an increased risk of fire. This issue was attributed to a design flaw in the engine failsafe system introduced during the development phase [106922]. (b) The software failure incident related to the operation phase is also highlighted in the article. Specifically, the Escape compact crossover SUVs were affected by a wonky tire pressure monitoring system that may not accurately detect low tire pressures. This operational failure could lead to drivers not realizing their tire pressures are low, impacting handling performance and increasing the risk of a crash. The issue with the tire pressure monitoring system points to a failure introduced during the operation or use of the system [106922].
Boundary (Internal/External) within_system (a) within_system: The software failure incidents mentioned in the article are within the system. In the case of the Transit Connect van, the recall is due to a buggy engine failsafe that could allow engine temperatures to rise past safe values, potentially causing engine damage and increasing the risk of a fire. This issue originates from within the system, specifically the engine failsafe software [106922]. (b) outside_system: The software failure incidents reported in the article do not indicate any contributing factors originating from outside the system.
Nature (Human/Non-human) non-human_actions, human_actions (a) The software failure incident related to non-human actions: - In the Ford recall incident mentioned in Article 106922, the software failure in the Transit Connect vans was due to a buggy engine failsafe that allowed engine temperatures to rise past safe values, potentially leading to engine damage and an increased risk of fire. This issue was not introduced by human actions but was a result of a non-human factor in the software system [106922]. (b) The software failure incident related to human actions: - The software failure in the Escape compact crossover was attributed to a wonky tire pressure monitoring system that may not catch low tire pressures, potentially affecting handling performance and increasing the risk of a crash. This issue was likely introduced by human actions during the design or implementation of the monitoring system [106922].
Dimension (Hardware/Software) hardware, software (a) The software failure incident related to hardware: - The Ford Transit Connect vans were recalled due to a buggy engine failsafe that could allow engine temperatures to rise past safe values, potentially resulting in engine damage and an increased risk of fire. This issue is related to hardware as it involves the engine failsafe mechanism [106922]. (b) The software failure incident related to software: - The Ford Escape recall was due to a wonky tire pressure monitoring system that may not catch low tire pressures, leading to a decrease in handling performance and an increased risk of a crash. This issue is related to software as it involves the monitoring system software not functioning correctly [106922].
Objective (Malicious/Non-malicious) non-malicious (a) The articles do not mention any software failure incident related to malicious intent to harm the system. [106922] (b) The software failure incident mentioned in the articles is non-malicious. The Ford recalls for the Transit Connect van and Escape compact crossover were due to a buggy engine failsafe and a wonky tire pressure monitoring system, respectively. These issues were not introduced with the intent to harm the system but rather as unintended faults that could potentially lead to engine damage, fire risk, decreased handling performance, and increased crash risk. [106922]
Intent (Poor/Accidental Decisions) accidental_decisions (a) The software failure incident related to the Ford recalls for the Transit Connect van and the Escape compact crossover was not due to poor decisions but rather due to a buggy engine failsafe in the Transit Connect van and a wonky tire pressure monitoring system in the Escape. The issues were not a result of poor decisions but rather technical faults in the software systems [106922].
Capability (Incompetence/Accidental) development_incompetence, accidental (a) The software failure incident related to development incompetence is seen in the article as Ford announced recalls for the Transit Connect van and the Escape compact crossover due to specific issues. The Transit Connect vans had a buggy engine failsafe that could allow engine temperatures to rise past safe values, potentially leading to engine damage and an increased risk of fire. This issue was attributed to a development flaw in the failsafe cooling strategy [106922]. (b) The software failure incident related to accidental factors is evident in the article concerning the Escape compact crossover. The recall was issued because of a wonky tire pressure monitoring system that may not detect low tire pressures, leading to decreased handling performance and an increased risk of a crash. This issue was accidental in nature, as it was not intentional but rather a result of the system not functioning as intended [106922].
Duration temporary (a) The software failure incident related to the Ford recalls for the Transit Connect van and the Escape compact crossover seems to be temporary rather than permanent. The recalls are being issued to address specific issues with the engine failsafe in the Transit Connect vans and the tire pressure monitoring system in the Escape SUVs. These issues are described as "buggy" and "wonky," indicating that they are not permanent design flaws but rather temporary faults that can be rectified through software updates or module replacements [106922].
Behaviour crash, omission, other (a) crash: The article mentions a software failure incident related to a crash in the Ford Transit Connect vans. The buggy engine failsafe in these vans could lead to delays in the "failsafe cooling strategy," potentially resulting in engine damage and an increased risk of fire [106922]. (b) omission: The software failure incident related to omission is seen in the Escape compact crossover's tire pressure monitoring system. The system may fail to catch low tire pressures, leading to drivers not realizing the issue, which could decrease handling performance and increase the risk of a crash [106922]. (c) timing: The articles do not provide information about a software failure incident related to timing. (d) value: The software failure incident related to value is not explicitly mentioned in the articles. (e) byzantine: The articles do not provide information about a software failure incident related to a byzantine behavior. (f) other: The other behavior mentioned in the articles is related to the software failure incident in the Escape compact crossover, where the body control module needs to be replaced to address the issue with the tire pressure monitoring system [106922].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence harm, property, theoretical_consequence The consequence of the software failure incident mentioned in the article is related to potential harm to individuals due to the software failure. Specifically, in the case of the Ford recalls, the buggy engine failsafe in the Transit Connect vans could lead to engine damage and increase the chance of a fire if the failsafe cooling strategy fails [106922]. Additionally, the wonky tire pressure monitoring system in the Escape compact crossover may not catch low tire pressures, which could result in a decrease in handling performance and an increase in the risk of a crash [106922]. These consequences fall under the category of harm to individuals due to the software failure.
Domain transportation (a) The software failure incident reported in the article is related to the transportation industry. The incident involves Ford's Transit Connect van and Escape compact crossover, both of which are vehicles designed for transportation purposes [106922].

Sources

Back to List