Arbitrary Code Execution Vulnerability in BlackVue DR750-2CH LTE Firmware
CVE-2023-27748

9.8CRITICAL

Key Information:

Vendor

Blackvue

Status
Dr750-2ch Lte Firmware
Vendor
CVE Published:
13 April 2023

What is CVE-2023-27748?

The BlackVue DR750-2CH LTE camera suffers from a vulnerability due to the lack of an authenticity check for uploaded firmware. This oversight permits unauthorized users to upload manipulated firmware versions that could contain backdoors, leading to potential arbitrary code execution on the device. Organizations using this model should assess their security posture and consider implementing safeguards against malicious firmware uploads. Regularly monitoring updates from BlackVue and applying patches as needed is essential to mitigate potential risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/eyJhb/blackvue-cve-2022
https://shop.blackvue.com/product/dr750-2ch-ir-lte/
https://blackvue.com

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.