Iosix Micro Device: Equipment recall

What's wrong

IOSiX is recalling certain 2017-2024 IO-1020 micro device dongles. A software vulnerability may allow third-party firmware to be uploaded to the dongle or access to the primary vehicle databus.

Why it matters

Exploitation of the software vulnerability may result in an engine stall, increasing the risk of a crash.

The fix

IOSiX has released an over-the-air (OTA) software update, free of charge. Owner notification letters were mailed November 15, 2024. Owners may contact IOSiX customer service at 1-855-623-1939.

Owners may also contact the National Highway Traffic Safety Administration Vehicle Safety Hotline at 1-888-327-4236 (TTY 1-800-424-9153), or go to www.nhtsa.gov. Please be reminded of the following requirements:You are required to submit a draft owner notification letter to this office no less than five days prior to mailing it to the customers.Also, copies of all notices, bulletins, dealer notifications, and other communications that relate to this recall, including a copy of the final owner notification letter and any subsequent owner follow-up notification letter(s), are required to be submitted to this office no later than 5 days after they are originally sent (if they are sent to more than one manufacturer, distributor, dealer, or purchaser/owner).Please be reminded that under 49 U.S.