CVE-2026-82716: falha de média gravidade em Botslab G980H
Botslab G980H Dashcams Insertion of Sensitive Information into Log File
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.1epss 0.2%
The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with physical access to the storage media could retrieve the logs and obtain sensitive device information.
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Botslab · G980HCVEs relacionadas — Botslab G980H
No mesmo produto, das mais perigosas para as menos.
CVE-2026-82566HIGHBotslab G980H Dashcams Insufficient session expirationEPSS 0.3%CVE-2026-85496HIGHBotslab G980H Dashcams Generation of Predictable Numbers or IdentifiersEPSS 0.3%CVE-2026-87118MEDIUMBotslab G980H Dashcams Out-of-bounds WriteEPSS 0.2%CVE-2026-77967HIGHBotslab G980H Dashcams Authentication Bypass by Capture-replayEPSS 0.2%CVE-2026-88956HIGHBotslab G980H Dashcams Missing Authentication for Critical FunctionEPSS 0.2%CVE-2026-82708HIGHBotslab G980H Dashcams Improper Limitation of a Pathname to a Restricted DirectoryEPSS 0.2%