Botslab G980H Dashcams
Plan PatchCVSS 8.8ICS-CERT ICSA-26-267-01Sep 24, 2026
Attack path
Attack VectorAdjacent
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary
The G980H dash cam series contains multiple authentication bypass and data protection vulnerabilities (CWE-863, CWE-613, CWE-340, CWE-294, CWE-1391, CWE-306, CWE-532, CWE-321, CWE-345, CWE-787, CWE-22, CWE-798, CWE-319). Successful exploitation allows an attacker to bypass authentication controls, gain unauthorized access to sensitive data and privileged device functionality, modify device configuration, and disrupt device operation.
What this means
What could happen
An attacker on the local network could bypass camera authentication, access or modify video recordings and device settings, and disrupt camera operation. This could expose sensitive surveillance footage or disable monitoring entirely.
Who's at risk
Organizations operating G980H dash cam systems for video surveillance or monitoring, particularly in transportation, parking, facilities management, or security operations where video integrity and availability are critical.
How it could be exploited
An attacker with access to the same local network as the G980H dash cam can exploit authentication bypass vulnerabilities (CWE-863, CWE-306) to gain unauthorized access to the device. Once authenticated, the attacker can read sensitive data including video recordings (CWE-532), modify device configuration (CWE-345), or cause denial of service.
Prerequisites
- Access to the local network segment where the G980H dash cam is connected
- No valid credentials required due to authentication bypass vulnerabilities
No authentication requiredLow complexity attackNo patch availableNetwork-accessible device
Exploitability
Unlikely to be exploited — EPSS score 0.3%
Affected products (2)
2 pending
ProductAffected VersionsFix Status
G980H dash cam series: 30010_QHG980HN5294SysFW+30010 QHG980HN5294SysFW+No fix yet
G980H dash cam series: 58_QHG980HMCN5291SysFW+58 QHG980HMCN5291SysFW+No fix yet
Remediation & Mitigation
0/4
Do now
0/2WORKAROUNDContact Botslab directly for security guidance and updates on patch availability at https://www.botslab.com/pages/about-botslab
HARDENINGDisable remote access or management features on G980H dash cams if not operationally required
Schedule — requires maintenance window
0/1Patching may require device reboot — plan for process interruption
HARDENINGMonitor network traffic to and from G980H dash cams for suspicious activity, particularly unauthorized access attempts
Long-term hardening
0/1HARDENINGIsolate G980H dash cams to a separate, restricted network segment with access controls limiting which devices can reach them
CVEs (14)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/716627c6-9a83-4afd-83f7-ab368880eadcGet OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.