Vida CEM swapping

S40cem · Post by **S40cem** » 19 Dec 2025, 09:03

vtl wrote: 19 Dec 2025, 08:17
S40cem wrote: 19 Dec 2025, 08:05 Thank you very much for your reply.
I tried different order settings from 0 to 4, but every time the software reported that the PIN code could not be cracked. Each attempt produced a different 6-digit result.
Try to remove this line: https://github.com/vtl/volvo-cem-cracke ... .ino#L1322 (and similar line in one_pass branch, try it there, too). Also show a good picture of your hardware?

I tried deleting line 1322, but unfortunately the PIN code was not cracked.

S40cem · Post by **S40cem** » 19 Dec 2025, 09:09

repair wrote: 22 Oct 2025, 09:10

Searching for pin on P1 - 29 seconds...

I have the same CEM module number. How did you manage to do it?

Post by **vtl** » 19 Dec 2025, 09:27

Is it an OBD cable? CAN uses a differential signalling, the wires need to be twisted.

If you crack your CEM on the bench (outside of car) you need to terminate CAN bus - the yellow jumper on your CAN bus shield.

gavik · Post by **gavik** » 22 Dec 2025, 02:40

dikidera wrote: 17 Dec 2025, 10:05 Please test this new version. It should have fixed the issues, but most importantly, verify when the parts catalog loads that its data is 1:1 with the real vida. What is weird in your screenshot is that the vehicle shows 5 profiles, but on my android-vida I only get 3. What region is that?

Can you post the finished APK? I can't compile it.

Dragoz001 · Post by **Dragoz001** » 25 Dec 2025, 08:31

Hi all,
Thanks for your great job here.
I made the sketch with a Teensy 4.0 but I'm failing to connect to the HS CAN on my MY04 XC90.
My CEM is a CEM-B, part number is 08688513 so it requires a K-Line activation. I use some transistors to send the K-Line keep alive message.
I managed to see the LS CAN but not the HS.
Any help would be greatly appreciated!
Merry Xmas to all!
Gilles

Post by **vtl** » 25 Dec 2025, 08:33

This CEM style can't be cracked via timing attack.

Dragoz001 · Post by **Dragoz001** » 25 Dec 2025, 09:09

Thanks for your fast reply!
Oh. I thought it was... This ref is listed in the code.
Any other solution?

Post by **vtl** » 25 Dec 2025, 09:10

Dragoz001 wrote: 25 Dec 2025, 09:09 Thanks for your fast reply!
Oh. I thought it was... This ref is listed in the code.
Any other solution?

Arduino EEPROM reader, can find in this thread. Need to take the CEM out and solder a bunch of wires.

Dudde · Post by **Dudde** » 25 Dec 2025, 09:23

Dragoz001 wrote: 25 Dec 2025, 09:09 Thanks for your fast reply!
Oh. I thought it was... This ref is listed in the code.
Any other solution?

Use OM to get pincode through OBD

Dragoz001 · Post by **Dragoz001** » 25 Dec 2025, 09:26