Vendors / BlackVue Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now BlackVue records in CISA KEV No BlackVue vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 76
BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00742 · Published 2023-04-13 · No fix listed CWE-345
Priority HIGH 75
BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01752 · Published 2023-04-13 · No fix listed CWE-307
Priority HIGH 66
BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01128 · Published 2023-04-13 · No fix listed CWE-306
Open these records in search → All records by CVSS severity
Critical2 High1 Medium4 Low0 No CVSS0