Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Munic Clear all filters
TI-2015-02568 CVE-2015-2908 · GHSA-4x34-w43g-2cfc

Insufficient verification of data authenticity in Munic Mobile Devices OBD-II dongles

Priority MEDIUM 42

Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, do not validate firmware updates, which allows remote attackers to execute arbitrary code by specifyi…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.01783 Published 2015-08-23 Fixed in 2.x, 3.4.x CWE-345
TI-2015-02567 CVE-2015-2907 · GHSA-36vf-gm3g-hgwj

Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in…

Priority MEDIUM 44

Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, have hardcoded SSH credentials, which makes it easier for remote attackers to obtain access by levera…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02563 Published 2015-08-23 Fixed in 2.x, 3.4.x
TI-2015-02566 CVE-2015-2906 · GHSA-pwmv-666f-8qgp

Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in…

Priority MEDIUM 44

Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, store SSH private keys that are the same across different customers' installations, which makes it ea…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02563 Published 2015-08-23 Fixed in 2.x, 3.4.x