disclosure-thinkware-u3000

Thinkware U3000 Dashcam: Vulnerabilità di Sicurezza Tre vulnerabilità nel protocollo di controllo WiFi locale della dashcam Thinkware U3000, scoperte tramite reverse engineering dell'app Android ufficiale e confermate su hardware reale. Tutte e tre richiedono solo l'accesso alla rete locale: ness...

disclosure-thinkware-u3000

Thinkware U3000 Dashcam: Security Vulnerabilities Three vulnerabilities in the Thinkware U3000 dashcam's local WiFi control protocol, discovered through reverse engineering the official Android app and confirmed against real hardware. All three require only local network access: no physical acces...

CVE-2026-101055

A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GETSTATUS of the component TCP Service. The manipulation of the argument wifiinfo results in information disclosure. The attack can be executed remotely. The exploit has been...

CVE-2026-101053

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

CVE-2026-101054

A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function getfile of the file /tmp/wpasupplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available...

EUVD-2026-88227

A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GETSTATUS of the component TCP Service. The manipulation of the argument wifiinfo results in information disclosure. The attack can be executed remotely. The exploit has been...

CVE-2026-101055 Thinkware U3000 TCP Service GET_STATUS information disclosure

A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GETSTATUS of the component TCP Service. The manipulation of the argument wifiinfo results in information disclosure. The attack can be executed remotely. The exploit has been...

CVE-2026-101055

A security flaw in Thinkware U3000 (up to version 1.02.04 ) allows for information disclosure via the GET_STATUS function of the TCP Service component. By manipulating the wifi_info argument, an attacker can remotely execute this attack. An exploit has been released to the public and may be used ...

CVE-2026-101055 Thinkware U3000 TCP Service GET_STATUS information disclosure

A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GETSTATUS of the component TCP Service. The manipulation of the argument wifiinfo results in information disclosure. The attack can be executed remotely. The exploit has been...

CVE-2026-101054

A vulnerability exists in the Thinkware U3000 (versions up to 1.02.04 ) within the TCP Service component. The flaw is located in the get_file function of the /tmp/wpa_supplicant.conf file, where improper access controls allow for remote exploitation. This vulnerability can lead to unauthorized ac...

CVE-2026-101054 Thinkware U3000 TCP Service wpa_supplicant.conf get_file access control

A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function getfile of the file /tmp/wpasupplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available...

EUVD-2026-88225

A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function getfile of the file /tmp/wpasupplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available...

CVE-2026-101054 Thinkware U3000 TCP Service wpa_supplicant.conf get_file access control

A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function getfile of the file /tmp/wpasupplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available...

CVE-2026-101053 Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

CVE-2026-101053

The Thinkware U3000 (up to version 1.02.04 ) contains a vulnerability in the TCP Service component. Specifically, the PUT_FILE function involving the file /tmp/wpa_supplicant.conf is susceptible to improper access controls when an attacker manipulates the argument path . This flaw can be exploite...

EUVD-2026-88221

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

CVE-2026-101053 Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

PT-2026-99855

Name of the Vulnerable Software and Affected Versions Thinkware U3000 versions prior to 1.02.04 Description An issue exists in the TCP Service component where manipulating the path argument within the PUT FILE function for the file /tmp/wpa supplicant.conf can lead to improper access controls. Th...

CVE-2026-101054: Improper Access Control

A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function getfile of the file /tmp/wpasupplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available...

PT-2026-99856

Name of the Vulnerable Software and Affected Versions Thinkware U3000 versions prior to 1.02.04 Description Improper access controls exist within the TCP Service component. A remote attacker can manipulate the get file function associated with the /tmp/wpa supplicant.conf file to gain unauthorize...