70mai manufactures a compact line of internet-connected dashcam and vehicle-security products, including models such as the M300, X200, and A500S, whose firmware represents the primary attack surface. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and recur through authentication and access-control weaknesses—improper or missing authentication mechanisms, hard-coded credentials, and external path manipulation—that are endemic to embedded device firmware lacking robust identity verification and input sanitization. Defenders should prioritize inventory and segmentation of these devices and treat firmware updates for this vendor's products as security-relevant; current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by 70mai over time
Signals from CVEs in this vendor scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-11943CRITICAL A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to | Oct 19, 2025 | 9.8 | 31 | NO | NO |
CVE-2025-11942CRITICAL A flaw has been found in 70mai X200 up to 20251010. Affected is an unknown function of the component Pairing. Executing manipulation can lead to missing authentication. It is possi | Oct 19, 2025 | 9.8 | 30 | NO | NO |
CVE-2023-43271CRITICAL Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder through ftp and other protocols. | Oct 9, 2023 | 9.1 | 26 | NO | NO |
CVE-2025-2766HIGH 70mai A510 Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of 7 | Jun 6, 2025 | 8.8 | 25 | NO | NO |
CVE-2025-6529HIGH A vulnerability was found in 70mai M300 up to 20250611 and classified as critical. Affected by this issue is some unknown functionality of the component Telnet Service. The manipul | Jun 23, 2025 | 8.8 | 24 | NO | NO |
CVE-2025-12915MEDIUM A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. | Nov 8, 2025 | 6.4 | 23 | NO | NO |
CVE-2025-6526MEDIUM A vulnerability, which was classified as problematic, has been found in 70mai M300 up to 20250611. This issue affects some unknown processing of the component HTTP Server. The mani | Jun 23, 2025 | 5.3 | 17 | NO | NO |
CVE-2025-6530MEDIUM A vulnerability was found in 70mai M300 up to 20250611. It has been classified as problematic. This affects an unknown part of the file demo.sh of the component Telnet Service. The | Jun 23, 2025 | 4.8 | 15 | NO | NO |
CVE-2025-6528MEDIUM A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /livestream/12 of | Jun 23, 2025 | 4.3 | 15 | NO | NO |
A vulnerability, which was classified as problematic, was found in 70mai M300 up to 20250611. Affected is an unknown function of the component Web Server. The manipulation leads to | Jun 23, 2025 | 3.1 | 13 | NO | NO |
Signals from CVEs in this vendor scope (10 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by 70mai.
Media articles that mention a CVE ID that affects a product developed by 70mai — matched by CVE ID, not by vendor name.