CyberRota Analysis
AI-GeneratedThe Botslab G980H dash camera firmware is vulnerable due to its use of predictable session identifiers generated from a limited sequential value space. This flaw allows an unauthenticated attacker with adjacent network access to potentially hijack active sessions, thereby bypassing authorization controls. Organizations utilizing this firmware should prioritize remediation to mitigate the risk of unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session identifier and use it to bypass intended authorization controls.