CVE-2023-27746

BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2…

Critical · published April 13, 2023

CVSS v3.1
9.8
EPSS
2%
Percentile
77.7
In the wild
Unconfirmed
What it is

🚨 A weak default passphrase in the BlackVue DR750-2CH LTE camera is like giving a burglar the keys to your front door! 🔥 Think of this vulnerability as a restaurant that never changes the default recipe for its secret sauce — anyone can walk in, take a taste, and serve it up as their own dish. The setup is just too inviting for attackers! With this vulnerability, an attacker could easily crack the weak passphrase and gain unauthorized access to your device. This means they could potentially view sensitive footage or manipulate the camera settings, leading to an invasion of privacy that would be absolutely devastating!

Put simply

Think of this vulnerability as a restaurant that never changes the default recipe for its secret sauce — anyone can walk in, take a taste, and serve it up as their own dish. The setup is just too inviting for attackers! This vulnerability arises because the BlackVue DR750-2CH LTE uses a weak default WPA2 passphrase that can be cracked through brute force if the handshake is intercepted during transmission.

What to do

With this vulnerability, an attacker could easily crack the weak passphrase and gain unauthorized access to your device. This means they could potentially view sensitive footage or manipulate the camera settings, leading to an invasion of privacy that would be absolutely devastating! To secure your device, immediately change the default passphrase to a strong, unique one. Ensure that your firmware is updated to the latest version to mitigate any potential risks associated with this vulnerability. You've got this! By taking these steps, you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01752 · 77.7th percentile
Published
2023-04-13T00:00Z
EPSS history
Timeline
  • 13 APR 00:00Z
    BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2…
    cvelistv5