Vulnerabilities > Lemurmonitors

DATE CVE VULNERABILITY TITLE RISK
2016-04-22 CVE-2016-2354 Improper Access Control vulnerability in Lemurmonitors Bluedriver 6.3.2
The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to disrupt braking or steering.
low complexity
lemurmonitors CWE-284
8.0