important · Mobile — firmware
A public Viidure Android APK exposes credentials that can modify or delete shared firmware and application binaries.
Affects
Viidure Dashcam Android Application, the Android companion app and cloud-storage client for Viidure dashcams
Anyone with the APK and internet access can recover permanent plaintext storage credentials and alter the shared binary store without a Viidure account.
Detail and 2 sources
Whether update clients independently reject modified artifacts remains unproven.