CVE

Id
80184  
CVE No.
CVE-2015-2907  
Status
Candidate  
Description
** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, have hardcoded SSH credentials, which makes it easier for remote attackers to obtain access by leveraging knowledge of the required username and password. NOTE: the vendor states "This was a flaw for the developer/debugging devices (again not possible in production versions)."  
Phase
Assigned (20150403)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
725795 80184 CVE-2015-2907 MISC:https://www.usenix.org/conference/woot15/workshop-program/presentation/foster  View
725796 80184 CVE-2015-2907 CONFIRM:http://www.kb.cert.org/vuls/id/CKIG-9ZAQGX  View
725797 80184 CVE-2015-2907 CERT-VN:VU#209512  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5563 JVNDB-2015-000075 NetFlow Analyzer におけるアクセス制限不備の脆弱性 Zoho Corporation が提供する NetFlow Analyzer には、アクセス制限不備の脆弱性が存在します。 CVE-2015-2959 80184 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000075.html  View