CVE-2019-12797 - A clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary commands to an OBD-II bus of a vehicle

CRITICAL

A clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary commands to an OBD-II bus of a vehicle

Published Jul 31, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 1.21%

A clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary commands to an OBD-II bus of a vehicle.

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

Link	Providers	Tags
https://www.kth.se/polopoly_fs/1.914060.1561621279%21/Ludvig%20and%20Daniel_final_dongles.pdf		x_refsource_MISC
https://www.kth.se/polopoly_fs/1.917488.1564430206%21/elm327.pdf		x_refsource_MISC

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jul 31, 2019

Updated Aug 4, 2024

Reserved Jun 13, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a