CVE-2018-11478: An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices.

Security readout for executives and security teams

CVE-2018-11478 affects Vgate iCar 2 Wi-Fi OBD2 dongles. The device exposes vehicle diagnostic access over local Wi-Fi without authentication. Because OBD access can read vehicle data and, depending on the vehicle, send commands, the main risk is unauthorized interaction when an attacker can reach the dongle’s Wi-Fi network. Exposure is most likely in vehicles where the Vgate iCar 2 Wi-Fi OBD2 dongle is plugged in and its Wi-Fi network is reachable. Risk is local-network scoped, not described as internet-reachable in the sources. Treat this as a practical fleet and maintenance-tool exposure issue. It is not documented as remotely exploited, but unauthorized local Wi-Fi access to vehicle diagnostics can create safety, operational, and data risks if dongles remain connected. Mitigation focus: Inventory use of Vgate iCar 2 Wi-Fi OBD2 dongles across vehicles and toolkits.; Remove the dongle when it is not actively required for diagnostics.; Limit use to controlled environments with trusted nearby Wi-Fi users..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.