CVE-2025-14346 — WHILL / Model C2 Electric Wheelchair

CVE-2025-14346

WHILL / Model C2 Electric Wheelchair PUBLISHED

Description (CNA)

WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections. An attacker within range can pair with the device and issue movement commands, override speed restrictions, and manipulate configuration profiles without any credentials or user interaction.

Affected (CNA)

Vendor / product	Versions
WHILL / Model C2 Electric Wheelchair	affected all
WHILL / Model F Power Chair	affected all

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-364-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.