CVE-2023-43271

Published: Oct 9, 2023Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder through ftp and other protocols.

Affected (1)

Products: 70mai: A500s Firmware

70mai

1 product

A500s Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
70mai A500s Firmware	Version 1.2.119

Running on/with	Platform Versions
70mai A500s	All versions

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (4)

https://github.com/Question-h/vuln/blob/master/70mai_a500s_backdoor.md

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/Question-h/vuln/blob/master/CVE-2023-43271.md

Source: cve@mitre.org

Third Party Advisory

https://github.com/Question-h/vuln/blob/master/70mai_a500s_backdoor.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://github.com/Question-h/vuln/blob/master/CVE-2023-43271.md

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.