Camshaft Position Sensor “B” Circuit Range/Performance Bank 1

What P0366 means

Engines with variable timing on both camshafts use two cam position sensors per bank: an 'A' sensor (typically intake) and a 'B' sensor (typically exhaust). P0366 is set against the bank-1 'B' sensor — the exhaust-cam sensor on the cylinder-1 side. Each Hall-effect sensor reads a toothed target on its camshaft and returns a square-wave pulse that tells the PCM exactly where that cam is. The PCM cross-checks this pulse pattern against the crankshaft position signal to confirm valve timing and to steer the variable-cam-timing (VVT/VCT) oil-control valve. Unlike the plain circuit codes, P0366 is the 'range/performance' fault: the signal is present, but it does not behave the way the PCM expects. It may be electrically noisy, arrive at the wrong crank angle, or drift out of correlation with the crank so the module can no longer trust it to schedule cam timing. The code sets when the PCM detects this implausible or erratic pattern over its monitoring window while the engine runs, and it will often default cam timing to a safe base position until the signal is trustworthy again.

Symptoms

• Check-engine light on, sometimes with a stored VVT or cam-timing companion code
• Rough or unstable idle, occasional stumble or brief stall as cam timing is corrected
• Hard or extended cranking before the engine catches, or an intermittent no-start
• Hesitation, surging or a flat spot on light throttle when timing is out of correlation
• Reduced power or a 'limp' feel while the PCM holds cam timing at a safe default
• Slightly worse fuel economy or higher emissions during the fault

Common causes

• Failing bank-1 'B' (exhaust) camshaft position sensor producing a noisy or mistimed pulse
• Loose, backed-out or corroded sensor connector terminals, or oil wicking into the connector
• Chafed, pinched or heat-damaged CMP harness, or damaged sensor shielding letting electrical interference corrupt the signal
• Damaged or debris-fouled reluctor/target wheel, or an out-of-spec sensor-to-target air gap
• Worn VVT/VCT phaser, cam-timing chain slack or a stretched chain that lets the cam signal drift relative to the crank
• Low or dirty engine oil upsetting the cam-timing actuator so the cam position no longer tracks command

Severity & driving advice

Severity: Moderate — Often driveable, but an out-of-range cam signal can cause stalling, hard starts or lost power, so diagnose it before relying on the vehicle.

Can I drive? Short trips OK; stall/no-start risk — fix soon.

Diagnostic approach

1. Confirm the code and capture freeze-frame — Read all stored codes and note the freeze-frame conditions (rpm, coolant temp, engine load) present when P0366 set. Look for companion codes in the P0365-P0369 family, an 'A'-sensor code (P0340-P0344), a crank code (P0335/P0336) or a VVT/actuator code — a cluster points to a shared harness or a real timing problem rather than a lone sensor. Because 'range/performance' faults are often intermittent, plan to test with the harness disturbed and the engine warm.
2. Inspect the sensor, connector and target wheel — Unplug the bank-1 'B' CMP sensor and check for oil intrusion, spread or corroded pins and a loose lock. Remove the sensor and inspect the tip and the camshaft target/reluctor wheel for metal debris, chipped teeth, damage or an out-of-spec air gap. Debris on the tone wheel or a wandering air gap is a classic source of a noisy, implausible signal.
3. Verify power, ground and signal integrity — With the key on, back-probe the three-wire connector: confirm a steady reference feed (about 5 V, or battery voltage on some designs) and a clean ground with less than 0.1 V drop. Most modern CMP sensors are Hall-effect and have no meaningful resistance, so do not condemn one on an ohm reading; older two-wire variable-reluctance types read roughly 200-900 ohms. A weak feed or shared-ground problem can make the signal wander out of range.
4. Scope the signal against the crank — Back-probe the signal wire with a scope or graphing meter and run the engine: a good Hall sensor gives a crisp square wave switching between near 0 V and roughly 5 V once per cam event, with no missing, ragged or extra pulses. Overlay the bank-1 'B' trace with the crank signal and watch for correct correlation — a pulse arriving at the wrong crank angle, ragged edges or noise on the line is exactly what sets P0366. Wiggle the harness and let the engine heat-soak to force the fault to show.
5. Check cam timing, then repair and verify — If wiring and sensor test clean but the cam signal still drifts out of correlation, inspect the VVT/VCT phaser and timing chain for wear or stretch and confirm oil is clean and at level, since low or degraded oil upsets the actuator. Replace the sensor, repair the harness or re-terminate the connector as the tests indicate, restore correct routing and shielding, clear the code, then road-test through the freeze-frame conditions and several heat cycles to confirm P0366 stays gone.

Make & model notes

Ford: On dual-VVT engines such as the 5.0L 'Coyote' V8, the bank-1 'B' sensor is the exhaust-cam sensor on the cylinder-1 side. Ford's own data has the PCM monitor the CMP sensor for a noisy signal and points diagnosis at radio-frequency or electromagnetic interference, damaged sensor shielding, poor harness routing and a damaged camshaft phaser and sprocket — so check shielding and connector integrity before condemning the sensor.

Toyota: Toyota ties the sensor to VVT-i cam-timing control; on dual VVT-i engines the bank-1 exhaust-cam sensor feeds cam position to the ECM. Verify oil is clean and at level and inspect the exhaust-cam oil-control-valve wiring, because low or sludged oil upsets cam-timing correlation and can throw a range/performance code that mimics a bad sensor.

Jeep / Stellantis: On Chrysler-group engines like the 3.6L Pentastar, cam-sensor faults often trace to connector corrosion or oil wicking up the harness into the sensor. Inspect for oil intrusion at the connector and confirm the target/tone wheel is clean and the timing chain is not stretched before replacing the sensor for a bank-1 'B' range/performance fault.

FAQ