CVE-2023-27746

CRITICAL

Blackvue Dr750-2ch Lte Firmware - Brute Force

Title source: rule

Description

BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted.

Exploits (1)

nomisec WORKING POC 10 stars

by eyJhb · poc

https://github.com/eyJhb/blackvue-cve-2023

View Code ZIP pw:eip

References (4)

[Product] https://blackvue.com

[Exploit, Third Party Advisory] https://github.com/eyJhb/blackvue-cve-2022

[Exploit, Third Party Advisory] https://github.com/eyJhb/blackvue-cve-2023

[Product] https://shop.blackvue.com/product/dr750-2ch-ir-lte/

Scores

CVSS v3 9.8

EPSS 0.1011

EPSS Percentile 93.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-307

Status published

Products (2)

blackvue/dr750-2ch_ir_lte_firmware 1.012_2022.10.26

blackvue/dr750-2ch_lte_firmware 1.012_2022.10.26

Published Apr 13, 2023

Tracked Since Feb 18, 2026