CVE-2023-27747

EUVD-2023-31483
BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. This vulnerability allows attackers to access sensitive information such as configurations and recordings.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA-ADPADP
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
Affected Products (NVD)
VendorProductVersion
blackvuedr750-2ch_lte_firmware
1.012_2022.10.26:_2022.10
blackvuedr750-2ch_ir_lte_firmware
1.012_2022.10.26:_2022.10
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://blackvue.com
https://github.com/eyJhb/blackvue-cve-2022
https://github.com/eyJhb/blackvue-cve-2023
https://shop.blackvue.com/product/dr750-2ch-ir-lte/
https://blackvue.com
https://github.com/eyJhb/blackvue-cve-2022
https://github.com/eyJhb/blackvue-cve-2023
https://shop.blackvue.com/product/dr750-2ch-ir-lte/