CVE-2016-2354

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to disrupt braking or steering.

• CWE-284

• http://www.kb.cert.org/vuls/id/615456Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/615456Third Party Advisory, US Government Resource

Published

Apr 22, 2016

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2347Integer underflow in the decode_level3_header function in li…
• CVE-2016-2349Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP …
• CVE-2016-2350Multiple cross-site scripting (XSS) vulnerabilities on the A…
• CVE-2016-2351SQL injection vulnerability in home/seos/courier/security_ke…
• CVE-2016-2352The Accellion File Transfer Appliance (FTA) before FTA_9_12_…
• CVE-2016-2353The Accellion File Transfer Appliance (FTA) before FTA_9_12_…
• CVE-2016-2355SQL injection vulnerability in the REST API in dotCMS before…
• CVE-2016-2356Milesight IP security cameras through 2016-11-14 have a buff…9.8
• CVE-2016-2357Milesight IP security cameras through 2016-11-14 have a hard…9.8
• CVE-2016-2358Milesight IP security cameras through 2016-11-14 have a defa…9.8
• CVE-2016-2359Milesight IP security cameras through 2016-11-14 allow remot…9.8
• CVE-2016-2360Milesight IP security cameras through 2016-11-14 have a defa…9.8