CVE-2018-11476: An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices.

Security readout for executives and security teams

This CVE describes a car diagnostic Wi-Fi dongle that creates an open wireless network with no password or encryption option. Anyone physically nearby could join that network without approval. Business risk is highest for fleets or vehicles where unauthorized local access to diagnostic interfaces could create safety, privacy, or operational concerns. Exposure is limited to organizations or individuals using Vgate iCar 2 Wi-Fi OBD2 dongles while powered in vehicles. Attackers must be within wireless range of the dongle. Internet-facing exposure is not indicated by the supplied sources. Treat this as a targeted physical-proximity risk, not a broad internet emergency. Prioritize fleets, executive vehicles, shared vehicles, and environments where nearby unauthorized access is realistic. Replacement or removal is the cleanest risk reduction if vendor guidance is unavailable. Mitigation focus: Identify and remove affected dongles from sensitive vehicles.; Do not leave the dongle plugged in when not actively needed.; Check vendor or retailer guidance for supported replacements or mitigations..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.