Iosix recall: Equipment
What is wrong
IOSiX is recalling certain 2017-2024 IO-1020 micro device dongles. A software vulnerability may allow third-party firmware to be uploaded to the dongle or access to the primary vehicle databus.
What could happen
Exploitation of the software vulnerability may result in an engine stall, increasing the risk of a crash.
The fix
IOSiX has released an over-the-air (OTA) software update, free of charge. Owner notification letters were mailed November 15, 2024. Owners may contact IOSiX customer service at 1-855-623-1939.
Vehicles covered
- Iosix Micro Device
Facts
- NHTSA recall number
- 24E077000
- Type
- Equipment
- Filed by
- Iosix
- Reported to NHTSA
- Sep 18, 2024
- Owners notified
- Nov 15, 2024
- Vehicles or items affected
- 140,000
- Started by
- NHTSA investigation
- Built
- Oct 19, 2017 to Oct 12, 2022
- Part
- Equipment › Electrical › Dongle
Notes
Owners may also contact the National Highway Traffic Safety Administration Vehicle Safety Hotline at 1-888-327-4236 (TTY 1-800-424-9153), or go to www.nhtsa.gov. Please be reminded of the following requirements:You are required to submit a draft owner notification letter to this office no less than five days prior to mailing it to the customers.Also, copies of all notices, bulletins, dealer notifications, and other communications that relate to this recall, including a copy of the final owner notification letter and any subsequent owner follow-up notification letter(s), are required to be submitted to this office no later than 5 days after they are originally sent (if they are sent to more than one manufacturer, distributor, dealer, or purchaser/owner).Please be reminded that under 49 U.S.C. § 30112(a)(3), it is illegal for a manufacturer, to sell, offer for sale, import, or introduce or deliver into interstate commerce, a motor vehicle or item of motor vehicle equipment that contains a safety defect once the manufacturer has notified NHTSA about that safety defect.This prohibition does not apply once the motor vehicle or motor vehicle equipment has been remedied according to the manufacturer's instructions.As stated in 49 U.S.C. § 30118(f), submission of eight consecutive quarterly reports followed by three annual reports is required. As described in 573.7, submission of the first of eight consecutive quarterly status reports is required within one month after the close of the calendar quarter in which notification to purchasers occurs. Therefore, the first quarterly report will be due on, or before, 30 days after the close of the calendar quarter. The first of three consecutive annual status reports will be due on, or before, 1 year after the eighth quarterly report was submitted.
To check one car, enter its 17-character VIN on the official NHTSA page: a recall may cover only some vehicles of a model year.
Recall data: National Highway Traffic Safety Administration (NHTSA). Nebula is not affiliated with or endorsed by NHTSA.