Vgate iCar 2 Wi-Fi OBD2
Approved changes feed: RSS · Atom
cpe:2.3:h:vgate:icar_2_wi-fi_obd2:-:*:*:*:*:*:*:*part: h version: - update: *
| Vendor | Vgate (1b0d0a0a-6128-5a9b-992d-1877097a799b) |
|---|---|
| Product | Icar 2 Wi Fi Obd2 (33daf92f-cc6a-5319-a5c3-aaa9c2d885cc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-11478 |
not_vulnerable | 2026-06-08 05:10:38.557017 |
Details available
An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The OBD port is used to receive measurement data and debug information from the car. This on-board diagnostics feature can also be used to send commands to the car (different for every vendor / car product line / car). No authentication is needed, which allows attacks from the local Wi-Fi network.
Published: 2018-05-30T21:00:00.000Z
Updated: 2024-08-05T08:10:14.388Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11477 |
not_vulnerable | 2026-06-08 05:10:38.556656 |
Details available
An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The data packets that are sent between the iOS or Android application and the OBD dongle are not encrypted. The combination of this vulnerability with the lack of wireless network protection exposes all transferred car data to the public.
Published: 2018-05-30T21:00:00.000Z
Updated: 2024-08-05T08:10:14.616Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11476 |
not_vulnerable | 2026-06-08 05:10:38.556094 |
Details available
An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The dongle opens an unprotected wireless LAN that cannot be configured with encryption or a password. This enables anyone within the range of the WLAN to connect to the network without authentication.
Published: 2018-05-30T21:00:00.000Z
Updated: 2024-08-05T08:10:14.342Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.