Botslab G980h
14 CVEs affecting Botslab G980h. Latest disclosed: 2026-09-24. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-85496 | High | 8.8 | 2026-09-24 | The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unaut… |
CVE-2026-84399 | High | 8.8 | 2026-09-24 | The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently as… |
CVE-2026-82566 | High | 8.8 | 2026-09-24 | The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client c… |
CVE-2026-81630 | High | 8.1 | 2026-09-24 | The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprot… |
CVE-2026-77967 | High | 8.1 | 2026-09-24 | The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting cl… |
CVE-2026-79959 | Medium | 6.8 | 2026-09-24 | The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or… |
CVE-2026-88956 | Medium | 6.8 | 2026-09-24 | The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The affected a… |
CVE-2026-82708 | Medium | 6.5 | 2026-09-24 | The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could s… |
CVE-2026-82585 | Medium | 6.5 | 2026-09-24 | The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacker capable of intercepting communic… |
CVE-2026-84403 | Medium | 6.2 | 2026-09-24 | The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications… |
CVE-2026-87118 | Medium | 5.7 | 2026-09-24 | The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with ad… |
CVE-2026-75558 | Medium | 5.3 | 2026-09-24 | The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An… |
CVE-2026-88761 | Medium | 5.3 | 2026-09-24 | The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the produc… |
CVE-2026-82716 | Medium | 4.6 | 2026-09-24 | The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the suppor… |