Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-79959 EUVD-2026-86464GHSA-f3h4-c3cq-ch4g

Botslab G980H Dashcams Use of Hard-coded Credentials

Published Sep 24, 2026 · Updated Sep 25, 2026 · Assigned by icscert

Description

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface.

Affected products

VendorProductAffectedFixed
Botslab G980H 30010_QHG980HN5294SysFW+, 58_QHG980HMCN5291SysFW+ —

Advisories 1

References