| tiêu đề | 70mai Dashcam 1S Authentication Bypass by Primary Weakness |
|---|
| Mô tả | Bypass Device Pairing of 70mai Dashcam 1S
From the official 70mai mobile app, a user needs to perform authorization by clicking on the physical power button in order to connect to the dashcam’s network. However, by connecting to the dashcam’s network and directly accessing the API on port 80 and RTSP on port 554, an attacker can bypass the device authorization mechanism that requires a user to physically press on the power button during connection. |
|---|
| Nguồn | ⚠️ https://github.com/geo-chen/70mai?tab=readme-ov-file#finding-1-bypass-device-pairing-of-70mai-dashcam-1s |
|---|
| Người dùng | geochen (UID 78995) |
|---|
| Đệ trình | 16/03/2025 01:48 (cách đây 2 những năm) |
|---|
| Kiểm duyệt | 21/03/2025 07:26 (5 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 300566 [70mai Dashcam 1S Pairing xác thực yếu] |
|---|
| điểm | 20 |
|---|