Vulnerability Details CVE-2023-27748
BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload crafted firmware which contains backdoors and enables arbitrary code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.2%
CVSS Severity
CVSS v3 Score 9.8
References
- https://blackvue.com
- https://github.com/eyJhb/blackvue-cve-2022
- https://github.com/eyJhb/blackvue-cve-2023
- https://shop.blackvue.com/product/dr750-2ch-ir-lte/
- https://blackvue.com
- https://github.com/eyJhb/blackvue-cve-2022
- https://github.com/eyJhb/blackvue-cve-2023
- https://shop.blackvue.com/product/dr750-2ch-ir-lte/
Products affected by CVE-2023-27748
-
cpe:2.3:h:blackvue:dr750-2ch_ir_lte:-
-
cpe:2.3:h:blackvue:dr750-2ch_lte:-
-
cpe:2.3:o:blackvue:dr750-2ch_ir_lte_firmware:1.012_2022.10.26
-
cpe:2.3:o:blackvue:dr750-2ch_lte_firmware:1.012_2022.10.26