Skip to main content

Scout Bobber + Tech CVE-2026-49318

| EUVDEUVD-2026-33313 LOW
Incorrect Behavior Order (CWE-696)
2026-05-29 ASRG GHSA-mv66-48p3-pfm6
Authentication Bypass Scout Bobber Tech
1.0
CVSS 4.0 · Vendor: ASRG

Severity by source

Vendor (ASRG) PRIMARY
1.0 LOW
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (ASRG) · only source for this CVE.

CVSS VectorVendor: ASRG

CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
CVSS changed
May 29, 2026 - 14:22 NVD
2.4 (LOW) 1.0 (LOW)
Analysis Generated
May 29, 2026 - 14:21 vuln.today

DescriptionCVE.org

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module (WCM) traffic during its boot window as a proxy for whether an immobilizer is fitted; if no WCM messages are observed, it skips the PIN entry screen and shows the normal user interface. An attacker who silences the WCM during the boot window - for example via a separately tracked CAN bus-off technique - can present a fully unlocked Infotainment despite the PIN never being entered. Specific timing and protocol details have been withheld pending vendor remediation.

AnalysisAI

PIN screen authentication bypass in the 2025 Indian Motorcycle Scout Bobber + Tech Infotainment / Digital Round display allows a physically proximate attacker to reach the fully unlocked user interface without entering a PIN. The system's boot-sequence logic (CWE-696) uses the mere presence of Wireless Control Module (WCM) CAN bus traffic as a proxy for immobilizer-fitment, and silently drops the PIN gate when no WCM messages appear - a condition an attacker can manufacture by suppressing the WCM via a CAN bus-off technique during the boot window. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Gain physical access to vehicle OBD-II port
Delivery
Connect CAN bus interface device
Exploit
Execute CAN bus-off fault injection to silence WCM
Execution
Trigger infotainment boot sequence
Persist
Infotainment detects no WCM traffic and skips PIN gate
Impact
Access fully unlocked infotainment UI
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires physical or near-physical access to the vehicle's CAN bus network, most practically via the OBD-II diagnostic port, to execute a CAN bus-off fault injection attack against the Wireless Control Module. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 3.1 score of 2.4 (Low) accurately reflects the genuine real-world risk ceiling. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with physical access to a parked 2025 Scout Bobber + Tech connects a commodity CAN bus interface (e.g., USB-CAN adapter) to the OBD-II port and transmits a CAN bus-off fault sequence targeting the Wireless Control Module before the rider powers on the infotainment. When the rider initiates boot, the infotainment observes no WCM traffic during its detection window, concludes no immobilizer is present, and bypasses the PIN screen - presenting the full unlocked infotainment UI. …
Remediation No vendor-released patch has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Scout Bobber Tech

View all
CVE-2026-49316 MEDIUM
4.1 May 29

CAN bus error-frame injection on the 2025 Indian Motorcycle Scout Bobber + Tech defeats the Wireless Control Module (WCM
CVE-2026-49325 MEDIUM
4.1 May 29

Anti-theft bypass in the 2025 Indian Motorcycle Scout Bobber + Tech allows a physical attacker who can access the Wirele
CVE-2026-49324 MEDIUM
4.1 May 29

Permanent denial-of-service against the 2025 Indian Motorcycle Scout Bobber + Tech's Wireless Control Module (WCM) allow
CVE-2026-49323 MEDIUM
4.1 May 29

Immobilizer bypass in the 2025 Indian Motorcycle Scout Bobber + Tech (Polaris Inc.) allows a physically adjacent attacke
CVE-2026-49322 MEDIUM
4.1 May 29

The Wireless Control Module (WCM) in the 2025 Indian Motorcycle Scout Bobber + Tech exposes the user-set vehicle unlock

CVE-2026-49317 LOW
1.0 May 29

PIN entry bypass in the Indian Motorcycle Scout Bobber + Tech 2025 infotainment system allows an attacker with physical

Same weakness CWE-696 – Incorrect Behavior Order

View all
CVE-2026-45033 HIGH
8.5
CVE-2025-31485 HIGH
7.5
CVE-2025-0150 HIGH
7.1
CVE-2026-35636 HIGH
7.1
CVE-2026-35627 MEDIUM
6.9
CVE-2026-35640 MEDIUM
6.9
CVE-2026-35637 MEDIUM
6.9
CVE-2026-35652 MEDIUM
6.9

Same technique Authentication Bypass

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2025-3248 CRITICAL POC
9.8
CVE-2025-49113 CRITICAL POC
9.9
CVE-2020-5849 HIGH POC
7.5
CVE-2024-7593 CRITICAL POC
9.8

Share

CVE-2026-49318 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy