Vendor
Botslab
14 known vulnerabilities.
Products
5 results · Clear filters · Feed
-
High 8.1
Botslab G980H Dashcams Insufficient Verification of Data Authenticity
The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cr…
-
High 8.1
Botslab G980H Dashcams Authentication Bypass by Capture-replay
The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting client. An unauthenticated attacker with adjacent network access who captures a valid authentication v…
-
High 8.8
Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers
The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could p…
-
High 8.8
Botslab G980H Dashcams Insufficient session expiration
The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established …
-
High 8.8
Botslab G980H Dashcams Incorrect Authorization
The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent priv…