CVE-2025-30124

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices

Critical · published July 28, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

🚨 A stark security oversight means your dashcam password is being saved in cleartext on the SD card — a gift for anyone who knows what to look for! 🔥 Think of it like leaving your house keys under the doormat; anyone who looks just has to pick them up! Just like that, all an attacker needs to do is swap the SD card to access sensitive information. An attacker with temporary access to your dashcam could effortlessly snatch the password, gaining entry to your personal data. This could lead to unauthorized access to your dashcam settings or even exposure of your sensitive recordings — absolutely devastating!

Put simply

Think of it like leaving your house keys under the doormat; anyone who looks just has to pick them up! Just like that, all an attacker needs to do is swap the SD card to access sensitive information. This vulnerability occurs when a new SD card is inserted into the Marbella KR8s Dashcam, causing the existing password to be written out in plain text on the SD card. This means that anyone with physical access can easily retrieve it.

What to do

An attacker with temporary access to your dashcam could effortlessly snatch the password, gaining entry to your personal data. This could lead to unauthorized access to your dashcam settings or even exposure of your sensitive recordings — absolutely devastating! To protect yourself, avoid inserting new SD cards into the dashcam until a patch is released. Furthermore, consider securing physical access to your dashcam and regularly changing your passwords. Keep an eye out for updates from the manufacturer regarding firmware fixes! You’ve got this! With a few precautions, you’ll be back on track to keeping your dashcam secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00316 · 23.2th percentile
Published
2025-07-28T00:00Z
EPSS history
Timeline
  • 28 JUL 00:00Z
    An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices
    cvelistv5