What is CVE-2018-11477?

CVE-2018-11477 is a medium-severity vulnerability in Vgate Icar 2 Wi-Fi Obd2, classified under Cleartext Transmission of Sensitive Information. CVSS score: 6.5/10. Published 2018-05-30.

How severe is CVE-2018-11477?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2018-11477 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Vgate Icar 2 Wi-Fi Obd2

CVE-2018-11477

An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The data packets that are sent between the iOS or Android application and the OBD dongle are not encrypted. The combination of this vulnerability with the lack of wireless network protection exposes all transferred car data to the public.

EPSS: 0.005 (38.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_FULLDISC, Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2018-11477?: CVE-2018-11477 is a medium-severity vulnerability in Vgate Icar 2 Wi-Fi Obd2, classified under Cleartext Transmission of Sensitive Information. CVSS score: 6.5/10. Published 2018-05-30.
How severe is CVE-2018-11477?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2018-11477 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.