The Viidure Android application stores its cloud storage credentials in plaintext within the compiled code. An attacker who can read the application package can extract these credentials, which grant full read‑write access to the cloud platform. With these credentials an attacker can read, modify, or delete critical operational data, including firmware and application binaries, potentially compromising device integrity and availability.

The vulnerability affects the Viidure Dashcam Android Application. No specific version information is provided in the advisory; any deployment of the application that contains the embedded credentials is susceptible.

The CVSS score of 10 indicates a critical severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The exploitation vector is inferred to be software reverse engineering or static analysis of the application bundle, after which the attacker uses the leaked credentials to access the cloud storage. No additional conditions such as network access or elevated privileges are required beyond the ability to read the application package.