The CISA alert covers the Viidure Dashcam Android app, used in transportation systems and deployed worldwide. It describes two flaws: public-read permissions on cloud storage and permanent storage credentials embedded in plain text in the compiled app.
According to the alert, the storage could expose user records, live camera images, app packages, and firmware. The embedded credentials could allow operational files to be read, modified, or deleted. CISA gives CVSS 3.1 scores of 7.5 and 10 for the flaws, respectively, and reports no planned fix; it also says the company did not respond to coordination attempts.
If you use the affected app, contact Viidure support to confirm the situation and recommended steps. Avoid relying on the app to protect recordings or other sensitive data until you receive updated guidance. If you use AI tools to study the alert, remove names, license plates, recordings, and credentials from any examples before submitting them.
Consult the original CISA advisory and its vulnerability summaries to verify scope, CVE identifiers, scores, and any updates. Compare the information with vendor notices and check whether a fix has been released since the alert; do not assume the situation is unchanged.