CVE-2016-2354

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

Command injection

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

CVE-2016-2354

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

CVE-2016-2354

The CVE-2016-2354 vulnerability affects Lemur Vehicle Monitors BlueDriver (pre-2016-04-07) where Bluetooth pairing requires no PIN. This enables an attacker within Bluetooth range to access the vehicle’s CAN bus and issue arbitrary CAN commands, potentially affecting safety-critical systems such ...

Lemur Vehicle Monitors BlueDriver Security Bypass Vulnerability

Lemur Vehicle Monitors BlueDriver is a product that scans aftermarket automotive equipment as well as vehicle performance information through an OBD-II port connected to the Vehicle. Lemur Vehicle Monitors BlueDriver handles Bluetooth connections without requiring a PIN code, allowing a remote...