The vulnerability permits an attacker with access to the vehicle’s CAN network to force the Wireless Control Module into a bus‑off state. By injecting well‑known CAN error frames against a periodic WCM transmission, the WCM’s transmit error counter exceeds the threshold, causing the module to cease all transmissions, including the immobilizer shutdown command. The vehicle’s other ECU units do not interpret this silence as a security event, so the motorcycle can continue to operate with the anti‑theft system disabled, effectively granting disengagement of the immobilizer without proper authorization.

Indian Motorcycle (Polaris Inc.) Scout Bobber + Tech 2025 model year.

The attack requires proximity to the vehicle’s CAN network and the ability to inject error frames. The CVSS score of 4.1 indicates a moderate severity; exploit probability data (EPSS) is not available, and the vulnerability is not listed in CISA’s KEV catalog. Because the technique relies on standard CAN error handling, an attacker with physical access could reproduce the bus‑off condition, but there is no evidence of widespread exploitation. The primary consequence is the compromise of anti‑theft protection, allowing the vehicle to remain operable without proper authorization while other systems continue functioning normally.