PYSEC-2017-50

Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode...

Code injection

Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode...

PYSEC-2017-50

Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode...

CVE-2015-7764

Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode...

CVE-2015-7764

Affected software: Lemur 0.1.4 (Python-based TLS certificate management tool). Issue: does not use sufficient entropy in its IV when encrypting AES in CBC mode, due to improper IV generation. This underlying cause can weaken confidentiality of CBC-encrypted data. Consequence (per sources): primar...

CVE-2015-7764

Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode...

CVE-2015-7764

Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode...

CVE-2015-7764: Insufficient Entropy

Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode...

PT-2017-7269

Name of the Vulnerable Software and Affected Versions Lemur version 0.1.4 Description The issue is related to insufficient entropy in the initialization vector IV when encrypting AES in CBC mode. Recommendations For version 0.1.4, consider updating to a version that properly implements sufficient...

CVE-2016-2354

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

Command injection

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

CVE-2016-2354: Improper Access Control

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

CVE-2016-2354

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

CVE-2016-2354

The CVE-2016-2354 vulnerability affects Lemur Vehicle Monitors BlueDriver (pre-2016-04-07) where Bluetooth pairing requires no PIN. This enables an attacker within Bluetooth range to access the vehicle’s CAN bus and issue arbitrary CAN commands, potentially affecting safety-critical systems such ...

PT-2016-5131

Name of the Vulnerable Software and Affected Versions Lemur Vehicle Monitors BlueDriver versions prior to 2016-04-07 Description The issue concerns the Bluetooth functionality, which allows for unrestricted pairing without a PIN. This enables remote attackers to send arbitrary CAN commands by...

Lemur Vehicle Monitors BlueDriver LSB2 does not authenticate users for Bluetooth access

Overview The Lemur Vehicle Monitors BlueDriver is an aftermarket automotive device that connects to a vehicle's OBD-II port and provides information about the vehicle's performance. The BlueDriver does not require a PIN for Bluetooth access, which allows anyone in range to send arbitrary commands...