| tiêu đề | i-DRIVE Dashcam i11, i12 Authentication Bypass by Primary Weakness |
|---|
| Mô tả | Bypassing of device pairing - The dashcam's authentication mechanism relies on a default password combined with a second factor (device registration). However, the device pairing process is based on MAC address recognition, which can be bypassed. An attacker can obtain the MAC address of a paired device through methods such as ARP scanning, spoof the MAC address, and successfully connect to the dashcam without completing the pairing process. This grants unauthorized access to the device’s network. |
|---|
| Nguồn | ⚠️ https://github.com/geo-chen/i-Drive |
|---|
| Người dùng | geochen (UID 78995) |
|---|
| Đệ trình | 27/02/2025 16:57 (cách đây 2 những năm) |
|---|
| Kiểm duyệt | 03/03/2025 13:25 (4 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 298194 [i-Drive i11/i12 đến 20250227 Device Pairing xác thực yếu] |
|---|
| điểm | 20 |
|---|