CVE-2026-79959: Botslab G980H Dashcams Use of Hard-coded Credentials
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to exploitation?
Owners of Botslab G980H dashcams are exposed if an attacker can obtain the firmware or gain physical access to the device and reach its UART interface. The available information does not describe a network-based attack path.
What does an attacker need to obtain root access?
An attacker needs the hard-coded root password, which can be recovered from the firmware, and access to the device's UART interface. No prior privileges or user interaction are indicated.
Can the affected root credential be changed?
No. The root account password is hard-coded in the firmware and cannot be changed by the user.
What can be done if patching is not immediately possible?
Limit physical access to the dashcam and prevent unauthorized access to its UART interface. Since the credential cannot be changed by the user, physical access controls are the available mitigation described by the issue.