Description
Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with access to the Wireless Control Module (WCM) wiring harness to bypass the anti-theft shutdown. The WCM signals shutdown to a peer ECU via a falling-edge voltage transition on a dedicated wire pair. The receiving ECU does not distinguish between an active shutdown pulse and an open-circuit / disconnected condition; interrupting the relevant wires leaves the motorcycle fully operable even though the WCM never validated the rider's PIN. Specific connector details have been withheld pending vendor remediation.
Problem types
CWE-1384 Improper Handling of Physical or Environmental Conditions
CWE-754 Improper Check for Unusual or Exceptional Conditions
CWE-693 Protection Mechanism Failure
Product status
2025 (model-year)
Timeline
| 2025-03-26: | Reported to Indian Motorcycle by Rustic Security LLC (responsible disclosure) |
Credits
Scott Sheahan, Rustic Security LLC
References
cwe.mitre.org/data/definitions/1384.html