Vulnerabilities

TI-2023-12389 CVE-2023-27748 · GHSA-9xwc-r37w-mmjm

BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded…

HIGH 76

BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00742 Published 2023-04-13 No fix listed CWE-345

TI-2023-12388 CVE-2023-27747 · GHSA-5p85-8h72-f99w

BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web…

HIGH 66

BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01128 Published 2023-04-13 No fix listed CWE-306

TI-2023-12387 CVE-2023-27746 · GHSA-99f8-8x85-w7xg

BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default…

HIGH 75

BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01752 Published 2023-04-13 No fix listed CWE-307

Vulnerabilities

Filters

BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded…

BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web…

BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default…