Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-85496

Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session identifier and use it to bypass intended authorization controls.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Botslab G980H

Default version status: unaffected

  • 30010_QHG980HN5294SysFW+affected
  • 58_QHG980HMCN5291SysFW+affected

References