CVE-2018-11477: An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices.

Security readout for executives and security teams

Vgate iCar 2 Wi-Fi OBD2 dongles can expose vehicle data because the app-to-dongle traffic is not encrypted and the Wi-Fi network lacks protection. Anyone able to access or observe that wireless communication could see transferred car data. The sources do not show active exploitation or a confirmed vendor fix. Exposure is most likely where Vgate iCar 2 Wi-Fi OBD2 dongles are installed, powered, and reachable over Wi-Fi. Risk is higher in shared parking, fleet yards, workshops, or public areas. The affected product metadata is incomplete beyond the named Vgate iCar 2 Wi-Fi OBD2 dongle. Treat this as a moderate operational privacy risk, especially for fleets or customer vehicles. It does not have evidence of active exploitation in the supplied sources, but it weakens confidentiality by design. Prioritize inventory, removal from exposed settings, and replacement with secure diagnostic hardware. Mitigation focus: Inventory and remove Vgate iCar 2 Wi-Fi OBD2 dongles where business use is not required.; Unplug affected dongles when not actively needed for diagnostics or telematics.; Check vendor guidance for firmware, replacement hardware, or supported secure alternatives..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.