CVE-2026-82708: Botslab G980H, обхождане на път

Описание

Оригинално описание

The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the web server. Exposed files could include recordings, images, diagnostic logs, or firmware files.

Засегнати продукти

• Botslab G980H: 30010_QHG980HN5294SysFW+; 58_QHG980HMCN5291SysFW+

Вид слабост

• CWE-22 Неправилно ограничаване на път до позволена директория

История

Други уязвимости в Botslab G980H

• 7.1CVE-2026-82585
• 7.0CVE-2026-79959
• 6.9CVE-2026-87118
• 9.2CVE-2026-81630
• 6.0CVE-2026-75558

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-82708
• https://nvd.nist.gov/vuln/detail/CVE-2026-82708
• https://www.botslab.com/pages/about-botslab
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-267-01.json