GCVE-110-CERTCC-2016-615456

Advisory PublishedCVSS 8.0/10

Vulnetix · Advisory published April 7, 2016

The Lemur Vehicle Monitors BlueDriver is an aftermarket automotive device that connects to a vehicle's OBD-II port and provides information about the vehicle's performance. The BlueDriver does not require a PIN for Bluetooth access, which allows anyone in range to send arbitrary commands to the vehicle's CAN bus.

Download JSON Open in Console

Risk Scores

CVSS 2.0

8.0/10

High · AV:A/AC:L/Au:N/C:P/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score7.6remediation_levelUreport_confidenceCenvironmental_score6.717495378624target_distributionMenvironmental_vectorCDP:H/TD:M/CR:L/IR:H/AR:L

Aliases

CVE-2016-2354

Transitive aliases

GHSA-59jx-p9cf-966v CNVD-2016-02143 GSD-2016-2354

References

Lemur Vehicle Monitors BlueDriver LSB2 does not authenticate users for Bluetooth access

url

Lemur Vehicle Monitors BlueDriver LSB2 does not authenticate users for Bluetooth access

url

Lemur Vehicle Monitors BlueDriver LSB2 does not authenticate users for Bluetooth access

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON