The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver prior to 2016-04-07 supports unrestricted pairing without a PIN, which allows remote malicious users to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to disrupt braking or steering.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
lemurmonitors bluedriver |