{"id":"01M6MYEE21Y7FECRE2V6JRJQ2B","slug":"bosch-drivelog-connect-obd-ii-dongle","vendor":"Bosch","oem":null,"model":"Drivelog Connect OBD-II dongle","hw_revision":null,"category":"obd_dongle","country_of_origin":"DE","description":"Bluetooth OBD dongle. Argus Cyber Security (2017) showed the pairing PIN could be brute-forced and messages injected onto the CAN bus (CVE-2017-9663, CVE-2017-9664).","status":"confirmed","status_reason":"Argus disclosure, April 2017; patched","status_at":1793853875942,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851865153,"updated_at":1793853875942,"url":"https://isitspying.com/p/bosch-drivelog-connect-obd-ii-dongle","badge":"https://isitspying.com/badge/bosch-drivelog-connect-obd-ii-dongle.svg","identifiers":[{"kind":"cve","value":"CVE-2017-9663","product_id":"01M6MYEE21Y7FECRE2V6JRJQ2B","confidence":1,"source":"seed","created_at":1793851865266},{"kind":"cve","value":"CVE-2017-9664","product_id":"01M6MYEE21Y7FECRE2V6JRJQ2B","confidence":1,"source":"seed","created_at":1793851865313},{"kind":"model_number","value":"DRIVELOGCONNECT","product_id":"01M6MYEE21Y7FECRE2V6JRJQ2B","confidence":1,"source":"seed","created_at":1793851865361}],"findings":[{"kind":"known_cve","severity":"high","n":2,"verified_n":2}],"contacted_hosts":[],"reports":[{"id":"01M6MYEEDM15DP4FB28FCDSJB4","url":"https://isitspying.com/r/01M6MYEEDM15DP4FB28FCDSJB4","status":"verified","verdict":"vulnerable","summary":"Weak Bluetooth PIN and missing message filtering allowed injecting CAN frames (e.g. stop the engine) from a nearby phone; patched by Bosch","method":"teardown","channel":"api","handle":"isitspying","created_at":1793851865524}],"responses":[],"sources":[{"id":"01M6MYEEB57ECH88E7877Z898K","product_id":"01M6MYEE21Y7FECRE2V6JRJQ2B","report_id":null,"title":"CVE-2017-9663","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9663","publisher":"NVD","published_at":"2017-06-07","created_at":1793851865445}]}