OFFICIAL NHTSA RECALL
24E077000
Equipment:electrical:dongle
Reported Sep 18, 2024 · IOSiX
Summary
IOSiX is recalling certain 2017-2024 IO-1020 micro device dongles. A software vulnerability may allow third-party firmware to be uploaded to the dongle or access to the primary vehicle databus.
Consequence
Exploitation of the software vulnerability may result in an engine stall, increasing the risk of a crash.
Remedy
IOSiX has released an over-the-air (OTA) software update, free of charge. Owner notification letters were mailed November 15, 2024. Owners may contact IOSiX customer service at 1-855-623-1939.
Notes
Owners may also contact the National Highway Traffic Safety Administration Vehicle Safety Hotline at 1-888-327-4236 (TTY 1-800-424-9153), or go to www.nhtsa.gov. Please be reminded of the following requirements:You are required to submit a draft owner notification letter to this office no less than five days prior to mailing it to the customers.Also, copies of all notices, bulletins, dealer notifications, and other communications that relate to this recall, including a copy of the final owner notification letter and any subsequent owner follow-up notification letter(s), are required to be submitted to this office no later than 5 days after they are originally sent (if they are sent to more than one manufacturer, distributor, dealer, or purchaser/owner).Please be reminded that under 49 U.S.C. § 30112(a)(3), it is illegal for a manufacturer, to sell, offer for sale, import, or introduce or deliver into interstate commerce, a motor vehicle or item of motor vehicle equipment that contains a safety defect once the manufacturer has notified NHTSA about that safety defect.This prohibition does not apply once the motor vehicle or motor vehicle equipment has been remedied according to the manufacturer's instructions.As stated in 49 U.S.C. § 30118(f), submission of eight consecutive quarterly reports followed by three annual reports is required. As described in 573.7, submission of the first of eight consecutive quarterly status reports is required within one month after the close of the calendar quarter in which notification to purchasers occurs. Therefore, the first quarterly report will be due on, or before, 30 days after the close of the calendar quarter. The first of three consecutive annual status reports will be due on, or before, 1 year after the eighth quarterly report was submitted.
This campaign page uses the representative official campaign record. Applicability-specific source variants appear on the linked vehicle pages. Recall counts refer to campaigns, not affected vehicles.
Vehicle entries in this campaign
This is model-level recall history. It does not confirm whether a particular VIN is affected or has received the repair. Check with NHTSA ↗