| Titolo | 70mai dashcam M300 Denial of Service |
|---|
| Descrizione | Remotely Crashing the Dashcam
If telnet is accessed on the 70mai Dashcam M300, a default script (demo.sh) is run automatically. In order to interact with the telnet session, the user needs to break the running of the script.
If not, the dashcam would continue running the default script, which is unintended, and that causes a natural crash and the dashcam light turns from green to blinking blue, then red, effectively stuck at a disabled state until the battery power drains out and it reboots.
This creates a DoS on the dashcam. A remote attacker nearby can connect to the dashcam's telnet session to crash the camera and disable it. |
|---|
| Fonte | ⚠️ https://github.com/geo-chen/70mai/blob/main/README.md#finding-8-remotely-crashing-the-dashcam |
|---|
| Utente | geochen (UID 78995) |
|---|
| Sottomissione | 11/06/2025 17:23 (1 Anno fa) |
|---|
| Moderazione | 23/06/2025 16:12 (12 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 313647 [70mai M300 fino a 20250611 Telnet Service demo.sh negazione del servizio] |
|---|
| Punti | 20 |
|---|