Description (CNA)
The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Viidure / Dashcam Android Application | affected 0 through 3.3.1.260403 |
CWE
CWE-798
References
- https://viidure.app/
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-07
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-07.json
ADP enrichment
No English description supplied.
No references supplied.