As said in the general overview of a CAN bus network – the Fiat has more than one CAN bus. As it’s rather simple car – it uses two buses: drivetrain CAN and infotainment CAN. Drivetrain CAN is responsible for the critical car components such as ECU, AIR-BAG, automatic gearbox and runs at a speed of 500kbps. The infotainment CAN is responsible for alle of the non-mission-critical information distribution such as the instrument cluster, radio, parking sensors, air conditioning etc. It runs at thw lower speed of 50kbps.

Like most of the cars – the Fiat has also a third CAN bus, which is used for diagnostics (and it’s available in the OBD connector). However, unlike most of the cars – the gateway (which is built into BCM – Board Control Module) is not filtering any messages, so it’s simplier for us, hackers, to connect directly to any connector that has CAN bus available. Thanks to that, we can send diagnostic messages to the instrument cluster, without a need for using a gateway. Also, it allows us to send live data directly to the cluster, so we can use it for building our hardware simulators.

I’ll provide all necessary wiring diagrams and pinouts on subpages of this page.