CVE-2016-2354 | BDVDB-2026-75495 Detail

Description#

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to disrupt braking or steering.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/615456

Exploit#

No public exploit known

History#

Version 12016-04-22Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.