CVE-2025-30114

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820

Critical · published March 18, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

🔥 A crafty impersonation is all it takes to hijack your dashcam! An attacker can spoof the MAC address of a connecting device and completely bypass the pairing mechanism on the Forvia Hella HELLA Driving Recorder DR 820. 🚨 Think of it like a thief who learns the secret code to your hotel room just by eavesdropping on the guests at check-in. The dashcam trusts whoever claims to be your device, just like a hotel door unlocking for the wrong person! If an attacker gains access, they could manipulate the dashcam's features, access recorded footage, or even disable it altogether. This poses a significant privacy risk, as sensitive information could be exposed or misused, leading to potentially devastating consequences for users.

Put simply

Think of it like a thief who learns the secret code to your hotel room just by eavesdropping on the guests at check-in. The dashcam trusts whoever claims to be your device, just like a hotel door unlocking for the wrong person! This vulnerability exists because the device's pairing relies solely on the connecting device's MAC address for authentication. An attacker can perform network scanning to discover valid MAC addresses and then spoof their own to gain unauthorized access.

What to do

If an attacker gains access, they could manipulate the dashcam's features, access recorded footage, or even disable it altogether. This poses a significant privacy risk, as sensitive information could be exposed or misused, leading to potentially devastating consequences for users. To protect your dashcam, ensure firmware is updated to the latest version and consider implementing additional authentication measures beyond just MAC address verification. Regularly scan your network for unauthorized devices and be vigilant about security practices. You've got this! With a few proactive steps, you can keep your dashcam secure and maintain your privacy. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00452 · 38.3th percentile
Published
2025-03-18T00:00Z
EPSS history
Timeline
  • 18 MAR 00:00Z
    An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820
    cvelistv5