Description (CNA)
The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications and GATT characteristics. An unauthenticated attacker within Bluetooth range could intercept or directly retrieve sensitive device information, including device identifiers, firmware information, and protected WiFi credentials.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Botslab / G980H | affected 30010_QHG980HN5294SysFW+; affected 58_QHG980HMCN5291SysFW+ |
CWE
CWE-306
References
- https://www.botslab.com/pages/about-botslab
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-267-01.json
ADP enrichment
No English description supplied.
No references supplied.