Description
WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections. An attacker within range can pair with the device and issue movement commands, override speed restrictions, and manipulate configuration profiles without any credentials or user interaction.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WHILL | Model C2 Electric Wheelchair | all | — |
| WHILL | Model F Power Chair | all | — |
Advisories 1
- ICSMA-25-364-01 WHILL Model C2 Electric Wheelchairs and Model F Power Chairs (Update B) CISA ICS & IT advisories · Jul 2, 2026
References
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-364-01 government-resource