jfiveash
Member
dhanson865 said:Has anyone tried this on a US VIN? The article mentions Canada, France, Norway, but no US.
yes, I have a prior URL to turn on my climate control with two arguments: DCMID and VIN. DCMID is derived from the username and password with another URL. It appears that leaving the DCMID blank in the URL still turns on my climate control. This is a mess. All the posted VINs are vulnerable.