Secure your OBD2 WiFi adapter

Useful devices with one serious disadvantage: The connection is (mostly) not protected factory side.

April 5, 2016
July 21, 2024

ODB2 WLAN adapters are certainly useful for interacting with the vehicle (functional coding, logbook, etc.) but with the serious disadvantage that - for reasons of convenience - the connection is not secured factory side when setting up by the end customer.

In the following case we will take a closer look at the Vgate iCar 3 WiFi and the config tool provided by the chip manufacturer. An HF-LPT200 from Hi-Flying is installed. Other OBD2 adapters are probably equipped with the same chip.

WiFi and data connection

After reconfiguration (STA mode) the adapters can also connect to an AccessPoint. This requires AT+ commands which configures AccessPoint, channel, encryption, password, etc. Mixed operation is also possible (APSTA mode).

However, you should consider using an app that assigns the IP based on the MAC address. Otherwise the IP config in the OBD2 app must be adjusted for each connection. Alternatively, you can assign the Vgate a fixed IP in STA mode.

The change may result in the warranty being lost. Errors, problems or in the worst case, the device being unusable. No liability is accepted for any damage.

Preparations

  1. Download the newest Firmware V1.0.08-04-20151113 & WiFi Config-Tools and Firmware V1.0.08-11-20171215

  2. Android: install WiFi Config Tools_1.3.apk. iPhone oder iPad: App Store

  3. connect to your V-LINK

Firmware Update

URL: http://192.168.0.10/iweb.html
User: admin | Passwort: admin

Change the SSID + WPA2 Encryption

Steps

  1. Open WiFi Config Tool
  2. Select device, wait briefly, check whether “Command Mode” is active & If necessary, check firmware with “AT+VER”.
  3. Enter AT+WAP -> send

    Answer: +ok=11BGN,V-LINK,AUTO

  4. AT+WAP=wifi_mode,ssid,channel z.b. AT+WAP=11BGN,sqrt,AUTO -> send

    WiFi Mode SSID Channel
    • 11B
    • 11BG
    • 11BGN
    • max. 32 Zeichen
  5. AUTO
  6. CH1 bis CH11
  7. if necessary, bottom right “Reset” & check whether the SSID has been adopted
  8. AT+WAKEY

    Answer: +ok=OPEN,NONE

  9. AT+WAKEY=auth,encryption,key z.b. AT+WAKEY=WPA2PSK,AES,12345678

    Auth Encryption Key
    • OPEN
    • WPA2PSK
    • NONE
    • AES
    desired key