Gandalf dr685sm
29/09/2011, 08:53
όπως μου ήρθε το βάζω και εδώ..
Disclosure Date Exploit Publish Date
2011-04-05 2011-04-05
Description
By default, Ducati Diavel motorcycles install with a default ignition password. The bike can be started using a manufacturer default PIN, set to the last 4 numbers of the Vehicle Identification Number (VIN), which is publicly known and documented. This allows attackers to trivially access the bicycle and enjoy the 162 horsepower and wind blowing through your hair.
Classification
Location: Physical Access Required
Attack Type: Authentication Management
Impact: Loss of Integrity
Solution: Workaround
Exploit: Exploit Public
Disclosure: Vendor Verified
Solution: Immediately after purchase, change the startup PIN as directed in the instruction manual (you did read that, right?).
Products
Unknown or Incomplete
References
Disclosure Date Exploit Publish Date
2011-04-05 2011-04-05
Description
By default, Ducati Diavel motorcycles install with a default ignition password. The bike can be started using a manufacturer default PIN, set to the last 4 numbers of the Vehicle Identification Number (VIN), which is publicly known and documented. This allows attackers to trivially access the bicycle and enjoy the 162 horsepower and wind blowing through your hair.
Classification
Location: Physical Access Required
Attack Type: Authentication Management
Impact: Loss of Integrity
Solution: Workaround
Exploit: Exploit Public
Disclosure: Vendor Verified
Solution: Immediately after purchase, change the startup PIN as directed in the instruction manual (you did read that, right?).
Products
Unknown or Incomplete
References