Botslab G980H Dashcams
CISA details multiple high-severity flaws in Botslab G980H dashcams that can bypass authentication over adjacent Wi-Fi.
56
CVE-2026-79959
- CVSS 4.0
- 7.0 high
- EPSS
- —
- Published
- ·
- Modified
Description · NVD
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface.
- Weakness
- CWE-798
- Vector
- CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X