PT-2023-21317 · Blackvue · Blackvue Dr750-2Ch Lte

Eyjhb · Publicado 2023-04-13 · Atualizado 2023-04-25 · CVE-2023-27747

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions BlackVue DR750-2CH LTE version 1.012 2022.10.26

Description The issue concerns the lack of authentication in the web server, allowing attackers to access sensitive information such as configurations and recordings.

Recommendations For BlackVue DR750-2CH LTE version 1.012 2022.10.26, consider restricting access to the web server as a temporary workaround until a patch is available.

Exploit

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2023-27747

Produtos afetados

Blackvue Dr750-2Ch Lte

Referências · 7

• 🔥 https://github.com/eyJhb/blackvue-cve-2023 · Exploit
• 🔥 https://github.com/eyJhb/blackvue-cve-2022 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-27747 · Nota de Segurança
• https://t.me/cibsecurity/62085 · Publicação no Telegram
• https://shop.blackvue.com/product/dr750-2ch-ir-lte · Nota
• https://osv.dev/vulnerability/CVE-2023-27747 · Aviso do Fabricante
• https://blackvue.com · Nota