c4 obd-ii dongle firmware vulnerabilities and fixes

Recent CVEs affecting c4 obd-ii dongle firmware, with upgrade or downgrade steps. 3 tracked.

Also searched as: c4 obd ii dongle firmware, c4obd-iidonglefirmware.

c4 obd-ii dongle firmware has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2015-08-23. Highest priority: CVE-2015-2907 (score 53/100).

• CVE-2015-2908 HIGH 9.0 UPGRADE Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other p
• CVE-2015-2907 HIGH 9.0 UPGRADE Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other p
• CVE-2015-2906 HIGH 9.0 UPGRADE Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other p

FAQ

How do I fix c4 obd-ii dongle firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is c4 obd-ii dongle firmware being exploited right now?

None of the tracked c4 obd-ii dongle firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which c4 obd-ii dongle firmware CVE should I patch first?

CVE-2015-2907 currently ranks highest (53/100): Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other p.

RSS feed for c4 obd-ii dongle firmware · ← Back to latest CVEs