CVE-2026-79959

Summary

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface.

Affected Software

VendorProductVersion RangeStatus
BotslabG980H30010_QHG980HN5294SysFW+affected
BotslabG980H58_QHG980HMCN5291SysFW+affected

Weaknesses

  • CWE-798: CWE-798

Workarounds

Botslab has not responded to requests to work with CISA to mitigate this vulnerability. Users of affected versions of G980H Dashcams are invited to reach out to Botslab for more information: https://www.botslab.com/pages/about-botslab

References