CVE

Id
80185  
CVE No.
CVE-2015-2908  
Status
Candidate  
Description
** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, do not validate firmware updates, which allows remote attackers to execute arbitrary code by specifying an update server. NOTE: the vendor states "This was a flaw for the developer/debugging devices, and was fixed in production version about 3 years ago."  
Phase
Assigned (20150403)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
725798 80185 CVE-2015-2908 MISC:https://www.usenix.org/conference/woot15/workshop-program/presentation/foster  View
725799 80185 CVE-2015-2908 CONFIRM:http://www.kb.cert.org/vuls/id/CKIG-9ZAQGX  View
725800 80185 CVE-2015-2908 CERT-VN:VU#209512  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5562 JVNDB-2015-000074 NetFlow Analyzer におけるクロスサイトスクリプティングの脆弱性 Zoho Corporation が提供する NetFlow Analyzer には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-2960 80185 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000074.html  View