CVE-2026-82716

Deferred Deferred - Pending Action

Sensitive Data Exposure in Botslab G980H Dash Camera Firmware

Publication date: 2026-09-24

Last updated on: 2026-09-25

Assigner: ICS-CERT

Description

The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with physical access to the storage media could retrieve the logs and obtain sensitive device information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-25

Generated

2026-10-15

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-13

NVD

CVE-2026-82716

Affected Vendors & Products

Vendor	Product	Version / Range
botslab	g980h_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Executive Summary

The Botslab G980H dash camera firmware stores sensitive configuration details, such as WiFi credentials, in diagnostic logs created during support processes. These logs remain on removable storage even after support is complete, allowing unauthorized physical access to retrieve them.

Detection Guidance

Check removable storage media connected to the Botslab G980H dash camera for diagnostic logs containing sensitive information like WiFi credentials. Inspect files for unusual or unencrypted data that may include configuration details.

Impact Analysis

An attacker with physical access to the storage media could extract sensitive device information, including network credentials, potentially leading to unauthorized network access or further exploitation of connected systems.

Compliance Impact

This vulnerability may violate data protection requirements under GDPR or HIPAA by exposing sensitive configuration data, potentially leading to non-compliance with privacy and security standards.

Mitigation Strategies

Remove and securely store any removable storage media after support operations. Ensure diagnostic logs are deleted or encrypted. Restrict physical access to the device and storage media to prevent unauthorized retrieval of sensitive data.

Hi! I’m here to help you understand CVE-2026-82716. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70