Critical Vulnerability in WHILL C2 Power Wheelchairs Allowing Remote Control

A critical security vulnerability with a CVSS score of 9.8 has been identified in WHILL C2 power wheelchairs, potentially allowing attackers to remotely control the devices. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an advisory warning that exploitation of this flaw could enable unauthorized manipulation of the wheelchairs, posing significant safety risks to users. The vulnerability highlights the growing concern over the security of connected medical and mobility devices.

CISA's advisory provides technical details and recommended mitigations for the WHILL C2 vulnerability, urging users and administrators to apply necessary updates and security measures. The agency also released an advisory for a separate product, AzeoTech DAQFactory, but the primary focus remains on the severe risk associated with the WHILL C2 flaw. Security experts emphasize the importance of promptly addressing such vulnerabilities in assistive technology to prevent potential exploitation and ensure user safety.