CVE-2025-14346criticalCWE-306

CVE-2025-14346: critical vulnerability in WHILL Model C2 Electric Wheelchair

Published

Follow this CVE+ Monitor Model C2 Electric Wheelchair+ Monitor Model F Power Chair

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 5.6%
WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections. An attacker within range can pair with the device and issue movement commands, override speed restrictions, and manipulate configuration profiles without any credentials or user interaction.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
WHILL · Model C2 Electric WheelchairWHILL · Model F Power Chair