CVE-2023-43271

PoC —

CVSS 3.1

9.1 critical

EPSS

<1%p46

Published

Oct 9, 2023 (Oct 9, 2023)

Modified

Jun 17, 2026

Description

Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder through ftp and other protocols.

Vendors: 70mai
Products: a500s firmware
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.