CyberRota Analysis
AI-GeneratedThe Botslab G980H dash camera firmware is vulnerable due to a session management flaw that allows an attacker with adjacent network access to exploit residual authentication states after a client connection has been terminated. This could enable unauthorized access to functionalities tied to another user's session, posing significant risks to user privacy and security. Organizations utilizing this dash camera should prioritize remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing client while previously established session state remains active until a separate expiration mechanism invalidates it. An unauthenticated attacker with adjacent network access could potentially take advantage of this residual authentication state to access functionality associated with another client's session.