[ Vendor · 14 CVEs ]
Botslab
CVEs affecting Botslab published in the last 30 days, plus any Botslab CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-87118 | 24 Sep 2026 | CVSS 5.7 | Botslab G980HThe Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated… | |
| CVE-2026-84403 | 24 Sep 2026 | CVSS 6.2 | Botslab G980HThe Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy… | |
| CVE-2026-82585 | 24 Sep 2026 | CVSS 6.5 | Botslab G980HThe Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacker capable of… | |
| CVE-2026-82708 | 24 Sep 2026 | CVSS 6.5 | Botslab G980HThe Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi… | |
| CVE-2026-82716 | 24 Sep 2026 | CVSS 4.6 | Botslab G980HThe Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during… | |
| CVE-2026-81630 | 24 Sep 2026 | CVSS 8.1 | Botslab G980HThe Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through… | |
| CVE-2026-79959 | 24 Sep 2026 | CVSS 6.8 | Botslab G980HThe Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the… | |
| CVE-2026-75558 | 24 Sep 2026 | CVSS 5.3 | Botslab G980HThe Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the… | |
| CVE-2026-88761 | 24 Sep 2026 | CVSS 5.3 | Botslab G980HThe Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by… | |
| CVE-2026-88956 | 24 Sep 2026 | CVSS 6.8 | Botslab G980HThe Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The… | |
| CVE-2026-82566 | 24 Sep 2026 | CVSS 8.8 | Botslab G980HThe Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the… | |
| CVE-2026-84399 | 24 Sep 2026 | CVSS 8.8 | Botslab G980HThe Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not… | |
| CVE-2026-85496 | 24 Sep 2026 | CVSS 8.8 | Botslab G980HThe Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable… | |
| CVE-2026-77967 | 24 Sep 2026 | CVSS 8.1 | Botslab G980HThe Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the… |