CVE-2018-11477

MEDIUM Year: 2018
CVSS v3 Score
6.5
Medium
CVSS v2 Score
3.3
Low
Weakness Type
CWE-319
View all →

Vulnerability Description

An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The data packets that are sent between the iOS or Android application and the OBD dongle are not encrypted. The combination of this vulnerability with the lack of wireless network protection exposes all transferred car data to the public.

Related Vulnerabilities

CVE-2012-5562

MEDIUM
CVSS:6.5(Medium)

rhn-proxy: may transmit credentials over clear-text when accessing RHN Satellite

CWE-3192012

CVE-2017-17844

MEDIUM
CVSS:6.5(Medium)

An issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content by sending an encrypted data block (that the attacker cannot directly decrypt) to a victim, and relying...

CWE-3192017

CVE-2017-6665

MEDIUM
CVSS:6.5(Medium)

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an a...

CWE-3192017

CVE-2018-16225

MEDIUM
CVSS:6.5(Medium)

The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the Swisscom Home application up to 10.7.2 f...

CWE-3192018

CVE-2019-0346

MEDIUM
CVSS:6.5(Medium)

Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), version 4.2, leads to disclosure of list of user names and roles imported from SAP ...

CWE-3192019

CVE-2019-0348

MEDIUM
CVSS:6.5(Medium)

SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can access database with unencrypted connection, even if the quality of protection should be encrypted.

CWE-3192019