Vulnerability Description
The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privileged operations rely on possession of a valid session identifier without adequately validating the requesting client's authenticated context. An unauthenticated attacker with adjacent network access could potentially use valid session state associated with another client to access privileged functionality.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-26
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01
FAQ
What is CVE-2026-84399?
CVE-2026-84399 is a vulnerability with a CVSS score of 8.8 (HIGH). The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the...
How severe is CVE-2026-84399?
CVE-2026-84399 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-84399?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.