CVE-2026-84403 describes a vulnerability in the Botslab G980H dash camera firmware where critical Bluetooth Low Energy functions do not require authenticated pairing or client binding. This allows an unauthenticated attacker in Bluetooth range to intercept or retrieve sensitive information including device identifiers, firmware information, and protected WiFi credentials. The CVSS 4.0 base score is 6.9, indicating a medium severity with local attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality.

An attacker within Bluetooth range can access sensitive device information without authentication, potentially compromising device identifiers, firmware data, and WiFi credentials. This exposure could lead to further attacks or unauthorized access to the device or network. However, exploitation requires proximity and no known exploits are reported in the wild.

No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restricting physical proximity to the device or disabling Bluetooth when not in use may reduce risk.