Vulnerability in Botslab G980H Dash Camera Firmware Exposes WiFi Credentials
CVE-2026-75558

6MEDIUM

Key Information:

Vendor

Botslab

Status
G980h
Vendor
CVE Published:
24 September 2026

What is CVE-2026-75558?

The Botslab G980H dash camera firmware contains a cryptographic weakness due to the use of a hard-coded cryptographic key and initialization vector for securing WiFi credentials. This flaw allows attackers to extract sensitive information, specifically the WiFi password, enabling unauthorized access to the device's network. Exploiting this vulnerability could lead to significant risks for users as malicious actors gain entry into private networks.

Affected Version(s)

G980H 30010_QHG980HN5294SysFW+

G980H 58_QHG980HMCN5291SysFW+

References

https://www.botslab.com/pages/about-botslab
https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Julian of Software Secured reported this vulnerability to CISA.
.