CVE-2023-27748

CRITICAL

BlackVue DR750-2CH LTE 1.012_2022.10.26 - Insufficient Firmware Authenticity Verification

Title source: llm
STIX 2.1

Description

BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload crafted firmware which contains backdoors and enables arbitrary code execution.

References (4)

Core 4

Scores

CVSS v3 9.8
EPSS 0.0073
EPSS Percentile 49.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-345
Status published
Products (2)
blackvue/dr750-2ch_ir_lte_firmware 1.012_2022.10.26
blackvue/dr750-2ch_lte_firmware 1.012_2022.10.26
Published Apr 13, 2023
Tracked Since Feb 18, 2026