CVE-2026-79959

Deferred Deferred - Pending Action

Hard-Coded Root Password in Botslab G980H Dash Camera Firmware

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: ICS-CERT

Description

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-24

Generated

2026-09-25

AI Q&A

2026-09-25

EPSS Evaluated

N/A

NVD

CVE-2026-79959

Affected Vendors & Products

Vendor	Product	Version / Range
botslab	g980h_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

The Botslab G980H dash camera firmware has a hard-coded root account password that users cannot change. An attacker with firmware access or physical access to the device can recover this password and gain root access via the UART interface.

Detection Guidance

Check for unauthorized root access via UART interface by inspecting serial console logs or attempting to log in with the hard-coded root password. Inspect firmware files for the presence of the hard-coded credential.

Impact Analysis

An attacker could exploit this to gain full control over the dash camera, potentially accessing sensitive data, modifying settings, or using the device as a pivot point for further attacks on connected systems.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR (data protection) and HIPAA (healthcare data privacy) by exposing personal or confidential information.

Mitigation Strategies

Disable UART access if possible, update to a patched firmware version if available, restrict physical access to the device, and monitor for suspicious root-level activity.

Hi! I’m here to help you understand CVE-2026-79959. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70