https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T18:38:36.049395+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-05628 cnvd-2015-05628 2026-10-16T18:38:36.052119+00:00 cnvd-2015-05628 https://cve.radiocsirt.org/vuln/euvd-2026-91462 EUVD-2026-91462 2026-10-16T18:38:36.052162+00:00 EUVD-2026-91462 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2907 fkie_cve-2015-2907 2026-10-16T18:38:36.052177+00:00

Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, have hardcoded SSH credentials, which makes it easier for remote attackers to obtain access by leveraging knowledge of the required username and password.

 https://cve.radiocsirt.org/vuln/ghsa-36vf-gm3g-hgwj GHSA-36vf-gm3g-hgwj 2026-10-16T18:38:36.052207+00:00

** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, have hardcoded SSH credentials, which makes it easier for remote attackers to obtain access by leveraging knowledge of the required username and password. NOTE: the vendor states "This was a flaw for the developer/debugging devices (again not possible in production versions)."

 https://cve.radiocsirt.org/vuln/gsd-2015-2907 gsd-2015-2907 2026-10-16T18:38:36.052226+00:00 gsd-2015-2907