70mai Dashcam Vulnerabilities: Unauth Access, RCE, Video Dump (CVE-2025-9832, CVE-2025-9826, CVE-2025-9829)

70mai Dashcam 15 Vulnerability Information Finding 1: CVE-2025-9832 - Bypass Device Pairing of 70mai Dashcam 15 CVE ID: CVE-2025-9832 Vulnerability Type: Device Pairing Bypass Affected Product: 70mai Dashcam 15 Severity: High Description: Attackers can bypass the device pairing process through specific requests, leading to unauthorized access. Finding 2: CVE-2025-9826 - Unauthenticated File Storage/Allowing Remote Dumping of Video Footage and Live Video Stream CVE ID: CVE-2025-9826 Vulnerability Type: Unauthenticated File Storage/Remote Video Data Dumping Affected Product: 70mai Dashcam 15 Severity: High Description: Attackers can store files without authorization and remotely dump video clips and live video streams. Finding 3: CVE-2025-9825 - Unauthorized Configuration Change CVE ID: CVE-2025-9825 Vulnerability Type: Unauthorized Configuration Change Affected Product: 70mai Dashcam 15 Severity: Medium Description: Attackers can change device configurations without authorization, affecting normal device operation. 70mai Dashcam M300 Vulnerability Information Finding 4: CVE-2025-9820 - Exposed Root Password via Unauthorized HTTP Access CVE ID: CVE-2025-9820 Vulnerability Type: Root Password Exposure via Unauthorized HTTP Access Affected Product: 70mai Dashcam M300 Severity: High Description: Attackers can obtain the device's root password through unauthorized HTTP access, enabling full control over the device. Finding 5: CVE-2025-9819 - Remotely Dump All Sensitive Video & Audio Recordings CVE ID: CVE-2025-9819 Vulnerability Type: Remote Dumping of All Sensitive Video and Audio Recordings Affected Product: 70mai Dashcam M300 Severity: High Description: Attackers can remotely dump all sensitive video and audio recordings stored on the device, compromising user privacy. Finding 6: CVE-2025-9828 - Unauthenticated Live Video Stream CVE ID: CVE-2025-9828 Vulnerability Type: Unauthenticated Live Video Stream Affected Product: 70mai Dashcam M300 Severity: High Description: Attackers can access live video streams without authorization, enabling surveillance of user activities. Finding 7: CVE-2025-9829 - Remotely Upload Malicious Files and Execute Code CVE ID: CVE-2025-9829 Vulnerability Type: Remote Upload of Malicious Files and Code Execution Affected Product: 70mai Dashcam M300 Severity: High Description: Attackers can remotely upload malicious files and execute code on the device, leading to device compromise or damage. Finding 8: CVE-2025-9830 - Remotely Crashing the Dashcam CVE ID: CVE-2025-9830 Vulnerability Type: Remote Crash of Dashcam Affected Product: 70mai Dashcam M300 Severity: Medium Description: Attackers can remotely trigger a device crash, causing the dashcam to malfunction or become inoperable.

Goal Reached Thanks to every supporter — we hit 100%!

70mai Dashcam Vulnerabilities: Unauth Access, RCE, Video Dump (CVE-2025-9832, CVE-2025-9826, CVE-2025-9829)

More from this source