Viidure Dashcam Android Application

CISA reports two critical issues in the Viidure Dashcam Android Application (<=3.3.1.260403): a misconfigured central cloud storage bucket with public-read permissions exposing sensitive user records, footage, application packages and firmware, and hard-coded plaintext cloud storage credentials in the app that grant full access to platform storage. Combined, these flaws allow attackers to read, modify, or delete operational files and could compromise the platform globally; the issues were reported to CISA (no known public exploitation at time of publication).