CVE Database
/

CVE-2016-2354

Back to search

CVE-2016-2354

Published: Apr 22, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to disrupt braking or steering.

VendorProductVersions

n/a

n/a

affected
n/a

References

VU#615456
third-party-advisory
x_refsource_CERT-VN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now