Botslab G980H Dashcams
CISA details multiple high-severity flaws in Botslab G980H dashcams that can bypass authentication over adjacent Wi-Fi.
56
CVE-2026-84403
- CVSS 4.0
- 6.9 medium
- EPSS
- —
- Published
- ·
- Modified
Description · NVD
The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications and GATT characteristics. An unauthenticated attacker within Bluetooth range could intercept or directly retrieve sensitive device information, including device identifiers, firmware information, and protected WiFi credentials.
- Weakness
- CWE-306
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X