PT-2018-10595 · Vgate · Vgate Icar 2 Wi-Fi Obd2 Dongle

T. Weber · Published 2018-05-30 · Updated 2018-07-05 · CVE-2018-11476

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Vgate iCar 2 Wi-Fi OBD2 Dongle (affected versions not specified)

Description The issue concerns an unprotected wireless LAN in the Vgate iCar 2 Wi-Fi OBD2 Dongle devices. This LAN cannot be configured with encryption or a password, allowing anyone within range to connect to the network without authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2018-11476

Affected Products

Vgate Icar 2 Wi-Fi Obd2 Dongle

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-11476 · Security Note
• https://sec-consult.com/en/blog/advisories/unprotected-wifi-access-unencrypted-data-transfer-in-vgate-icar2-wifi-obd2-dongle · Note
• http://seclists.org/fulldisclosure/2018/May/66 · Note