This vulnerability arises from the Indian Motorcycle Scout Bobber + Tech 2025 model's bike-shutdown control system, where the Wireless Control Module (WCM) signals shutdown to a peer ECU via a falling-edge voltage transition on a dedicated wire pair. The peer ECU does not differentiate between a legitimate shutdown pulse and an open-circuit or disconnected condition. Consequently, physically interrupting the wiring harness allows an attacker to bypass the anti-theft shutdown mechanism, enabling operation of the motorcycle without PIN validation. Specific connector details remain undisclosed pending vendor remediation. No official fix or patch has been announced as of the publication date.

The vulnerability allows a physical attacker with access to the WCM wiring harness to bypass the anti-theft shutdown, potentially enabling unauthorized use of the motorcycle despite the anti-theft system. The CVSS score of 4.6 (medium severity) reflects the requirement for physical access and the lack of direct confidentiality or integrity impact, but with a high impact on availability (denial of shutdown). There are no known exploits in the wild at this time.

No official remediation or patch has been disclosed by the vendor. Physical security controls to restrict access to the WCM wiring harness are recommended until a vendor fix is available. Monitor the vendor advisory for updates on patches or official mitigations. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.