EUVD-2016-3438

Malware in sbrugna...

CVE-2016-2354

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

Command injection

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

CVE-2016-2354

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

CVE-2016-2354: Improper Access Control

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

PT-2016-5131

Name of the Vulnerable Software and Affected Versions Lemur Vehicle Monitors BlueDriver versions prior to 2016-04-07 Description The issue concerns the Bluetooth functionality, which allows for unrestricted pairing without a PIN. This enables remote attackers to send arbitrary CAN commands by...

CVE-2016-2354

The CVE-2016-2354 vulnerability affects Lemur Vehicle Monitors BlueDriver (pre-2016-04-07) where Bluetooth pairing requires no PIN. This enables an attacker within Bluetooth range to access the vehicle’s CAN bus and issue arbitrary CAN commands, potentially affecting safety-critical systems such ...