CVE-2018-11478: Vgate Icar 2 Wi-Fi OBD2 Firmware

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The OBD port is used to receive measurement data and debug information from the car. This on-board diagnostics feature can also be used to send commands to the car (different for every vendor / car product line / car). No authentication is needed, which allows attacks from the local Wi-Fi network.

Affected products

• Vgate Icar 2 Wi-Fi OBD2 Firmware: affected versions not specified

Published 2018-05-30. Last modified 2026-06-17.