high8.8
CVE-2018-11476
An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices.
Impact
An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The dongle opens an unprotected wireless LAN that cannot be configured with encryption or a password. This enables anyone within the range of the WLAN to connect to the network without authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vgate | Icar 2 Wi-Fi Obd2 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2018/May/66
- https://www.sec-consult.com/en/blog/advisories/unprotected-wifi-access-unencrypted-data-transfer-in-vgate-icar2-wifi-obd2-dongle/
- http://seclists.org/fulldisclosure/2018/May/66
- https://www.sec-consult.com/en/blog/advisories/unprotected-wifi-access-unencrypted-data-transfer-in-vgate-icar2-wifi-obd2-dongle/