CVE-2015-2907 Information

Description

LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks DISPUTED LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x as used in Metromile Pulse and other products have hardcoded SSH credentials which makes it easier for remote attackers to obtain access by leveraging knowledge of the required username and password. NOTE: the vendor states \This was a flaw for the developer/debugging devices (again not possible in production versions).\

Reference

http://www.kb.cert.org/vuls/id/209512 http://www.kb.cert.org/vuls/id/CKIG-9ZAQGX https://www.usenix.org/conference/woot15/workshop-program/presentation/foster