X200 Firmware
Monthly
A vulnerability was found in 70mai X200 up to 20251019. Rated high severity (CVSS 7.1). Public exploit code available and no vendor patch available.
Use of default credentials in the 70mai X200 dashcam HTTP web server allows remote unauthenticated attackers to access the device with root privileges. All firmware versions up to 20251010 are affected, and a publicly available exploit exists. The vendor was contacted but did not respond, and no official patch is available.
Authentication bypass in 70mai X200 dashcam firmware up to version 20251010 allows remote attackers to pair with the device without any authentication. The flaw resides in the Pairing component and can be exploited without user interaction or privileges. A publicly available exploit exists on GitHub, but the vendor has not responded to disclosure, leaving devices vulnerable with no official patch.
A vulnerability was found in 70mai X200 up to 20251019. Rated high severity (CVSS 7.1). Public exploit code available and no vendor patch available.
Use of default credentials in the 70mai X200 dashcam HTTP web server allows remote unauthenticated attackers to access the device with root privileges. All firmware versions up to 20251010 are affected, and a publicly available exploit exists. The vendor was contacted but did not respond, and no official patch is available.
Authentication bypass in 70mai X200 dashcam firmware up to version 20251010 allows remote attackers to pair with the device without any authentication. The flaw resides in the Pairing component and can be exploited without user interaction or privileges. A publicly available exploit exists on GitHub, but the vendor has not responded to disclosure, leaving devices vulnerable with no official patch.