Security Advisory

CVE-2016-2354

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2016-04-22 00:00:00

Last updated 2024-08-05 23:24:49

Assigner certcc

State PUBLISHED

Description

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to disrupt braking or steering.

← Browse all CVEs View on cve.org ↗