{"id":"01M6MYEEDM15DP4FB28FCDSJB4","product_id":"01M6MYEE21Y7FECRE2V6JRJQ2B","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"Bosch disclosed Bluetooth authentication and CAN-message filtering weaknesses in April 2017, with server-side authentication mitigation and further updates planned.","body_md":null,"method":null,"source_method":null,"sources":[{"title":"Bosch Drivelog Connector advisory BOSCH-2017-0201","url":"https://psirt.bosch.com/security-advisories/bosch-2017-0201.html","publisher":"Bosch PSIRT","publishedAt":"2017-04-13"}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Removed two unrelated CVEs: 2017-9663 concerns OnStar, 2017-9664 ABB. Corrected severity, affected versions and unsupported complete-patch assertion. This is not independent device verification.","created_at":1793851865524,"updated_at":1793917832000,"slug":"bosch-drivelog-connect-obd-ii-dongle","vendor":"Bosch","model":"Drivelog Connect OBD-II dongle","category":"obd_dongle","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYEEDM15DP4FB28FCDSJB4","product_url":"https://isitspying.com/p/bosch-drivelog-connect-obd-ii-dongle","findings":[{"id":"accuracy:01M6MYEEDM15DP4FB28FCDSJB4:0","report_id":"01M6MYEEDM15DP4FB28FCDSJB4","kind":"security_vulnerability","severity":"medium","detail":"BOSCH-2017-0201: Bluetooth authentication weakness, CVSS3 6.3; permissive CAN-message filtering, CVSS3 6.5. Affected app <=1.1.1 and dongle 4.8.0–4.9.2.","ai_model":null}],"contacted_hosts":[],"evidence":[]}