BlackVue vulnerabilities
We track 5 vulnerabilities in BlackVue products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 6, 2025.
Latest BlackVue vulnerabilities
- 8.8 High severity
Dashcam 590X: Incorrect Privilege Assignment
A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.cgi of the component Configuration Handler. The manipulation leads to improper access con
- 8.8 High severity
Dashcam 590X: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /upload.cgi of the component HTTP Endpoint. The manipulation leads to unrestricted uploa
- 9.8 Critical severity
Dr750-2ch Lte Firmware: Insufficient Verification of Data Authenticity
BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload crafted firmware which contains backdoors and enables arbitrary code execution.
- 7.5 High severity
Dr750-2ch Lte Firmware: Missing Authentication for Critical Functionality
BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. This vulnerability allows attackers to access sensitive information such as configurations and recordings.
- 9.8 Critical severity
Dr750-2ch Lte Firmware: Improper Restriction of Excessive Authentication Attempts
BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted.