U3000 Firmware Update

[safedrivesolutions]

Thinkware has released an update for the U3000 dash camera.

i was unsure of what the firmware update was for so I reached out to Thinkware.
Here is the answer i got.

1. Addition of Wi-Fi Password Randomization feature as per P511 requirements.
2. Security vulnerability fixes (Telnet removal, Root Password addition).
3. Modification to immediately disconnect when entering parking mode while connected to Mobile Viewer via BT.
4. Fixed the issue where the Smart Parking Recording auxiliary battery saving feature setting would correctly enable/disable

 

[Vortex Radar]

Thanks for digging and sharing!

Security vulnerability fixes (Telnet removal, Root Password addition).

Wait, what? If you're connected to a home or work network for cloud recording, for example, someone could just telnet into the dashcam and there was no root password? Hopefully I'm misunderstanding?

 

[Vortex Radar]

lol okay wow... so I grabbed one of my U3000's and yeah, the thing is wide open. Check this out...

You can telnet directly into the dashcam from another device that's on the same network. You can log in as root without any password and then browse around the dashcam footage. Yikes!

Luckily telnet doesn't support file transfers like ssh/scp, but still.

Good reminder to be careful when you opt for a dashcam with cloud capabilities! Good security practices are important.