THREATIST.IORead the docs 14 records
The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections.
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user.
The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server.
The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality.
The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates.
The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device.
The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications and GATT characteristics.
The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process.
The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface.
The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the product.
The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting client.
The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source.
The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced.
The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality.