CVE Database
/

CVE-2015-2907

Back to search

CVE-2015-2907

Published: Aug 23, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, have hardcoded SSH credentials, which makes it easier for remote attackers to obtain access by leveraging knowledge of the required username and password.

VendorProductVersions

Munic

Mobile Devices (MDI) OBD-II dongles

affected
0 - < 2.x
affected
0 - < 3.4.x

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now