https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 11:35:00 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-05629 cnvd-2015-05629 https://cve.radiocsirt.org/vuln/cnvd-2015-05629 https://cve.radiocsirt.org/vuln/euvd-2026-91456 EUVD-2026-91456 https://cve.radiocsirt.org/vuln/euvd-2026-91456 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2908 <p>Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, do not validate firmware updates, which allows remote attackers to execute arbitrary code by specifying an update server.</p> <p>Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, do not validate firmware updates, which allows remote attackers to execute arbitrary code by specifying an update server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-2908 https://cve.radiocsirt.org/vuln/ghsa-4x34-w43g-2cfc <p>** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, do not validate firmware updates, which allows remote attackers to execute arbitrary code by specifying an update server. NOTE: the vendor states &#34;This was a flaw for the developer/debugging devices, and was fixed in production version about 3 years ago.&#34;</p> <p>** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, do not validate firmware updates, which allows remote attackers to execute arbitrary code by specifying an update server. NOTE: the vendor states &#34;This was a flaw for the developer/debugging devices, and was fixed in production version about 3 years ago.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-4x34-w43g-2cfc https://cve.radiocsirt.org/vuln/gsd-2015-2908 gsd-2015-2908 https://cve.radiocsirt.org/vuln/gsd-2015-2908