IM
IronMonkey Threat Research
‹ Back to ICS Advisories

WHILL Model C2 Electric Wheelchairs and Model F Power Chairs (Update B)

CRITICAL
CVSS 9.8
Date 2026-07-02T06:00:00+00:00
Source cisa-csaf
Published by CISA

// Description

Successful exploitation of this vulnerability could allow an attacker within Bluetooth range to take control over the product.

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2025-14346 9.8 critical
WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections. An attacker within range can pair with the device and issue movement commands, override speed restrictions, and manipulate configuration profiles without any credentials or user interaction.

// Remediations (8)

Mitigation: Unlock Command Restriction During Motion:
Unlock Command Restriction During Motion:
Mitigation: For more information, see WHILL Inc.'s bulletin (https://whill.inc/us/urgent-medical-device-correcti
For more information, see WHILL Inc.'s bulletin (https://whill.inc/us/urgent-medical-device-correction/).
Mitigation: For customers that previously disabled the BLE function as a mitigation to the vulnerability (refer
For customers that previously disabled the BLE function as a mitigation to the vulnerability (refer to Update A dated March 24, 2026), customers can now re-enable the BLE function. To turn on the BLE function, contact WHILL Inc. prior to installing the new firmware.
Mitigation: Obfuscate the configuration files used by the mobile application by converting JSON files into a bin
Obfuscate the configuration files used by the mobile application by converting JSON files into a binary format on both Android and iOS platforms.
Patch: WHILL has released Model C2 FW version HMI v3.00 and Model F FW version HMI v3.01 which includes a s
WHILL has released Model C2 FW version HMI v3.00 and Model F FW version HMI v3.01 which includes a secure BLE design that has been recently authorized by the FDA.
Mitigation: Block unlock commands issued from either the mobile app or the smart key while the wheelchair is in
Block unlock commands issued from either the mobile app or the smart key while the wheelchair is in motion.
Mitigation: For more information, contact WHILL Inc.
For more information, contact WHILL Inc.
Mitigation: Application JSON File Obfuscation:
Application JSON File Obfuscation:

// References