Predictable WiFi Password Vulnerability in Botslab G980H Dash Camera
CVE-2026-88761
6MEDIUM
What is CVE-2026-88761?
The Botslab G980H dash camera firmware has a vulnerability that stems from its method of generating default WiFi passwords using easily guessed device information. Portions of this information are publicly available, allowing an unauthenticated attacker within WiFi range to exploit the security flaw. By using limited guessing techniques, the attacker could potentially reconstruct the entire WiFi password and gain unauthorized access to the device's network, leading to possible privacy breaches and network compromise.
Affected Version(s)
G980H 30010_QHG980HN5294SysFW+
G980H 58_QHG980HMCN5291SysFW+
References
CVSS V4
Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Julian of Software Secured reported this vulnerability to CISA.
