The MyCar Controls of AutoMobility Distribution Inc., mobile application contains hard-coded admin credentials. A remote unauthenticated attacker may be able to send commands to and retrieve data from a target MyCar unit. This may allow the malicious user to learn the location of a target, or gain unauthorized physical access to a vehicle. This issue affects AutoMobility MyCar versions before 3.4.24 on iOS and versions before 4.1.2 on Android. This issue has additionally been fixed in Carlink, Link, Visions MyCar, and MyCar Kia.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mycarcontrols mycar controls |
Vulmon