Description
The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the affected process to terminate and the device to restart, resulting in a temporary denial of service.
Published: 2026-09-24
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Assess Impact
AI Analysis

Impact

An out‑of‑bounds write in the command processing of Botslab G980H dash cameras allows an authenticated attacker with adjacent network access to corrupt memory. The corruption can disrupt authentication state or crash the affected process, causing the device to reboot and creating a temporary denial of service.

Affected Systems

The vulnerability affects Botslab G980H dash cameras. No specific firmware versions are listed in the advisory.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity. EPSS is not available and the vulnerability is not listed in CISA's KEV catalog. Exploitation requires the attacker to be authenticated and to have access on the same local network as the device, so the attack vector is likely local but authenticated. If an attacker succeeds, the device reboots, resulting in a temporary denial of service and a short‑term availability risk.

Generated by OpenCVE AI on September 25, 2026 at 03:46 UTC.

Remediation

Vendor Workaround

Botslab has not responded to requests to work with CISA to mitigate this vulnerability. Users of affected versions of G980H Dashcams are invited to reach out to Botslab for more information: https://www.botslab.com/pages/about-botslab


OpenCVE Recommended Actions

  • Contact Botslab to request a security update or guidance on mitigating the out‑of‑bounds write.
  • Segregate the dashcam network so that only trusted, authenticated users can reach the device’s command interface, limiting adjacent network access.
  • Implement logging and monitoring of command traffic to detect abnormal authentication attempts and reboot events, and apply firmware updates promptly once a patch becomes available.

Generated by OpenCVE AI on September 25, 2026 at 03:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 26 Sep 2026 07:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 25 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Botslab
Botslab g980h
Vendors & Products Botslab
Botslab g980h

Thu, 24 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Description The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the affected process to terminate and the device to restart, resulting in a temporary denial of service.
Title Botslab G980H Dashcams Out-of-bounds Write
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 5.7, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2026-09-25T16:22:13.734Z

Reserved: 2026-09-10T15:25:29.834Z

Link: CVE-2026-87118

cve-icon Vulnrichment

Updated: 2026-09-25T16:22:03.839Z

cve-icon NVD

Status : Deferred

Published: 2026-09-24T21:18:56.603

Modified: 2026-09-25T17:17:16.550

Link: CVE-2026-87118

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-25T14:15:07Z

Weaknesses