Vulnerability · Published Sep 24, 2026 · Assigned by icscert
CVE-2026-84403Botslab G980H Dashcams Missing Authentication for Critical Function
Medium 6.2
In plain English
A medium-severity missing authentication in G980H from Botslab. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Official description
The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications and GATT characteristics. An unauthenticated attacker within Bluetooth range could intercept or directly retrieve sensitive device information, including device identifiers, firmware information, and protected WiFi credentials.
Affected products (as reported)
Weakness: CWE-306 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N