The firmware of the Botslab G980H dash camera allows the device to send sensitive data—including recordings, live video streams, location data, images, diagnostic logs, and other private information—using cleartext HTTP and RTSP channels. This lack of transport encryption permits an attacker who can tap the Wi‑Fi network to capture the data in transit, resulting in significant confidentiality loss. The weakness is classified as CWE‑319, which indicates that sensitive information is transmitted over an insecure channel.

The vulnerability affects Botslab G980H dash cameras. No specific firmware versions are listed, so all current revisions of the G980H model are considered at risk.

The CVSS score of 7.1 indicates moderate to high severity, but no EPSS score is available, making it unclear how frequently this issue is exploited. The vulnerability is not listed in the CISA KEV catalog, suggesting it is not known to be actively exploited in the wild as of this advisory. The attacker would need the ability to intercept traffic on the device’s wireless network, which could be achieved via a rogue access‑point or direct packet capture. Once traffic is captured, the attacker can read unencrypted media and data streams without requiring any authentication or exploiting another flaw.