| शीर्षक | SAFECAM dashcam X300 Plaintext Password in Configuration File |
|---|
| विवरण | Same Default Credentials with Hardcoded FTP Credentials in APK
The SAFECAM X300 dashcam ships with identical default credentials for all devices. This allows attackers to use the same credentials to connect to any SAFECAM X3 dashcams with default settings, within range, enabling unauthorized access to multiple devices. An attacker can then connect to the dashcam's FTP server using hardcoded FTP credentials found in the mobile app (Viidure v2.1.1.250317) and remotely download all recorded video footage, exposing sensitive data. |
|---|
| स्रोत | ⚠️ https://github.com/geo-chen/SAFECAM |
|---|
| उपयोगकर्ता | geochen (UID 78995) |
|---|
| सबमिशन | 11/06/2025 05:28 PM (1 वर्ष पहले) |
|---|
| संयम | 01/07/2025 07:46 AM (20 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 314488 [SAFECAM X300 तक 20250611 FTP Service सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|