CVE-2018-11477

CVE-2018-11477 affects Vgate iCar 2 Wi‑Fi OBD2 Dongle. The issue is that data packets between the mobile apps (iOS/Android) and the dongle are not encrypted, and there is a lack of wireless network protection. This potentially allows an attacker on the same network to access transferred car data....

Vgate iCar2 WiFi OBD2 Dongle Inadequate Access Protections

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unprotected WiFi access & Unencrypted data transfer product: Vgate iCar 2 WiFi OBD2 Dongle vulnerable version: Vgate iCar 2 WiFi OBD2 Dongle fixed version: - CVE number:...

OBD2-ELM327. Car Diagnostics - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application OBD2-ELM327. Car Diagnostics published at the 'play' market has multiple vulnerabilities...

OBD2 Codes Fix Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application OBD2 Codes Fix Free published at the 'play' market has multiple vulnerabilities...

OBD2 port Lookup - Car's DLC - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application OBD2 port Lookup - Car's DLC published at the 'play' market has multiple vulnerabilities...

Mobile Devices C4 OBD2 Dongle Privilege Access Vulnerability (CNVD-2015-05627)

The Mobile Devices aka MDI C4 OBD2 Dongle is a programmable OBD2 solution from the French company Mobile Devices. A security vulnerability exists in the Mobile Devices C4 OBD2 Dongle that arises from different user installers storing the same SSH private key. A remote attacker could exploit the...