CVE-2026-88761: fallo de gravedad media en Botslab G980H
Botslab G980H Dashcams Use of Weak Credentials
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6epss 0.2%
The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the product. An unauthenticated attacker within WiFi range could potentially determine the remaining password characters through limited guessing and gain unauthorized access to the device network.
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Botslab · G980HCVEs relacionadas — Botslab G980H
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-82566HIGHBotslab G980H Dashcams Insufficient session expirationEPSS 0.3%CVE-2026-85496HIGHBotslab G980H Dashcams Generation of Predictable Numbers or IdentifiersEPSS 0.3%CVE-2026-87118MEDIUMBotslab G980H Dashcams Out-of-bounds WriteEPSS 0.2%CVE-2026-77967HIGHBotslab G980H Dashcams Authentication Bypass by Capture-replayEPSS 0.2%CVE-2026-88956HIGHBotslab G980H Dashcams Missing Authentication for Critical FunctionEPSS 0.2%CVE-2026-82708HIGHBotslab G980H Dashcams Improper Limitation of a Pathname to a Restricted DirectoryEPSS 0.2%