CVE-2023-43271

9.1 criticalEPSS 0.7%

Critical (9.1) in 70mai a500s firmware. EPSS 0.7% chance of exploitation in the next 30 days.

Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder through ftp and other protocols.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2023-10-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

70mai:a500s_firmware

References

https://github.com/Question-h/vuln/blob/master/70mai_a500s_backdoor.md
https://github.com/Question-h/vuln/blob/master/CVE-2023-43271.md
https://github.com/Question-h/vuln/blob/master/70mai_a500s_backdoor.md
https://github.com/Question-h/vuln/blob/master/CVE-2023-43271.md

Check your stack JSON