Blackvue Dr590x Firmware
Monthly
A security vulnerability in BlackVue Dashcam 590X (CVSS 5.4). Risk factors: public PoC available.
Unrestricted file upload in BlackVue DR590X dashcam firmware allows unauthenticated attackers on the local network to upload arbitrary files via the /upload.cgi HTTP endpoint, achieving full device compromise. A public proof-of-concept exploit is available, but the vendor has not responded or released a patch. The low EPSS score (0.06%) and absence from CISA KEV suggest limited real-world exploitation so far.
A security vulnerability in BlackVue Dashcam 590X (CVSS 5.4). Risk factors: public PoC available.
Unrestricted file upload in BlackVue DR590X dashcam firmware allows unauthenticated attackers on the local network to upload arbitrary files via the /upload.cgi HTTP endpoint, achieving full device compromise. A public proof-of-concept exploit is available, but the vendor has not responded or released a patch. The low EPSS score (0.06%) and absence from CISA KEV suggest limited real-world exploitation so far.