70mai Dash Cam 1S Authorization Bypass Vulnerability

An authorization bypass vulnerability has been identified in the 70mai Dash Cam 1S. By connecting directly to the dashcam's Wi-Fi network and accessing the API on port 80 or the RTSP stream on port 554, an attacker can circumvent the authorization mechanism required by the official mobile app. This app-based authorization mandates that a user physically press the power button on the dashcam during the connection process.

Impact

Exploitation of this vulnerability allows for unauthorized access to the dashcam's features and functions, potentially leading to manipulation of the device or its recordings.