https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T11:35:06.955007+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-05629 cnvd-2015-05629 2026-10-16T11:35:06.957866+00:00 cnvd-2015-05629 https://cve.radiocsirt.org/vuln/euvd-2026-91456 EUVD-2026-91456 2026-10-16T11:35:06.957898+00:00 EUVD-2026-91456 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2908 fkie_cve-2015-2908 2026-10-16T11:35:06.957912+00:00

Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, do not validate firmware updates, which allows remote attackers to execute arbitrary code by specifying an update server.

 https://cve.radiocsirt.org/vuln/ghsa-4x34-w43g-2cfc GHSA-4x34-w43g-2cfc 2026-10-16T11:35:06.957939+00:00

** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, do not validate firmware updates, which allows remote attackers to execute arbitrary code by specifying an update server. NOTE: the vendor states "This was a flaw for the developer/debugging devices, and was fixed in production version about 3 years ago."

 https://cve.radiocsirt.org/vuln/gsd-2015-2908 gsd-2015-2908 2026-10-16T11:35:06.957958+00:00 gsd-2015-2908