CVE-2023-27746

EUVD-2023-31482
BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
blackvuedr750-2ch_lte_firmware
1.012_2022.10.26:_2022.10
blackvuedr750-2ch_ir_lte_firmware
1.012_2022.10.26:_2022.10
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://blackvue.com
https://github.com/eyJhb/blackvue-cve-2022
https://github.com/eyJhb/blackvue-cve-2023
https://shop.blackvue.com/product/dr750-2ch-ir-lte/
https://blackvue.com
https://github.com/eyJhb/blackvue-cve-2022
https://github.com/eyJhb/blackvue-cve-2023
https://shop.blackvue.com/product/dr750-2ch-ir-lte/