Vulnerability Details CVE-2019-12797
A clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary commands to an OBD-II bus of a vehicle.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 56.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://www.kth.se/polopoly_fs/1.914060.1561621279%21/Ludvig%20and%20Daniel_final_dongles.pdf
- https://www.kth.se/polopoly_fs/1.917488.1564430206%21/elm327.pdf
- https://www.kth.se/polopoly_fs/1.914060.1561621279%21/Ludvig%20and%20Daniel_final_dongles.pdf
- https://www.kth.se/polopoly_fs/1.917488.1564430206%21/elm327.pdf
Products affected by CVE-2019-12797
-
cpe:2.3:h:elmelectronics:elm27:-
-
cpe:2.3:o:elmelectronics:elm27_firmware:-