Bosch Drivelog Connect OBD-II dongle
A maintainer confirmed the finding, or it is tied to a published CVE or writeup.
Bluetooth OBD dongle. Argus Cyber Security (2017) showed the pairing PIN could be brute-forced and messages injected onto the CAN bus (CVE-2017-9663, CVE-2017-9664).
Identity
- Brand
- Bosch
- Model
- Drivelog Connect OBD-II dongle
- Made in
- DE (metadata, not a finding)
- Reports
- 1 total · 1 verified
Identifiers
| cve | CVE-2017-9663, CVE-2017-9664 |
| model_number | DRIVELOGCONNECT |
Check yours
Own one? Run the Trust Check and your report either corroborates or contradicts what's here. Both are useful.
claude mcp add --transport http isitspying https://mcp.isitspying.com/mcpThen ask: “Run a Trust Check on my Bosch Drivelog Connect OBD-II dongle.” Or file a report with photos.
Findings
| Finding | Max severity | Reports | Verified |
|---|---|---|---|
| Known CVE | high | 2 | 2 |
Published sources
- CVE-2017-9663 · NVD · 2017-06-07
Reports · 1
- Vulnerable verified Weak Bluetooth PIN and missing message filtering allowed injecting CAN frames (e.g. stop the engine) from a nearby phone; patched by Bosch
teardown · via api · by isitspying maintainers maintainer · 4h ago
Responses & disputes · right of reply
None yet.
Post a vendor response, dispute, or corroboration
Sign in to post.
Takedown or legal: takedown@isitspying.com. See how we handle disputes.
Embed the status
<a href="https://isitspying.com/p/bosch-drivelog-connect-obd-ii-dongle"><img src="https://isitspying.com/badge/bosch-drivelog-connect-obd-ii-dongle.svg"></a>
JSON: /api/products/bosch-drivelog-connect-obd-ii-dongle · or request this page with Accept: application/json.