CVE-2025-14346

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-14346 affects WHILL Model C2 Electric Wheelchairs and Model F Power Chairs. These devices lack proper authentication for Bluetooth connections. An attacker within Bluetooth range (approximately 30 feet) can pair with the wheelchair and issue movement commands, override speed restrictions, and manipulate configuration profiles without any credentials or user interaction. This vulnerability stems from the absence of authentication for critical functions in the wheelchair's control system. Successful exploitation could allow malicious actors to manipulate wheelchair movements, potentially causing physical harm to users or bystanders. CISA has issued an urgent warning about this flaw.

Description
-

Social media

Hype score
Not currently trending

References

Sources include official advisories and independent security research.