CVE-2025-30125

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices

Critical · published July 28, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

🚨 Every single Marbella KR8s Dashcam rolls off the shelf with the same default password: 12345678! 🔥 Imagine a neighborhood where every front door uses the same key — it’s an open invitation for anyone who knows just a little about security to waltz right in! This utterly insecure setup means that an attacker could easily gain full access to the dashcam, potentially manipulating the device or stealing sensitive footage. With the weak password limit of only 8 characters, it wouldn't take long for attackers to crack it, putting users at serious risk!

Put simply

Imagine a neighborhood where every front door uses the same key — it’s an open invitation for anyone who knows just a little about security to waltz right in! The vulnerability allows unauthorized access due to default credentials that are the same for all devices and a password length restriction that makes it easy to brute-force. With the default password remaining unchanged, any malicious actor can exploit this weakness.

What to do

This utterly insecure setup means that an attacker could easily gain full access to the dashcam, potentially manipulating the device or stealing sensitive footage. With the weak password limit of only 8 characters, it wouldn't take long for attackers to crack it, putting users at serious risk! Immediately change the default password to a stronger one — aim for at least 12 characters! Additionally, encourage users to regularly update their passwords and monitor their device settings for any unauthorized access. You've got this! Follow these steps and protect your dashcam like the security hero you are! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00446 · 37.7th percentile
Published
2025-07-28T00:00Z
EPSS history
Timeline
  • 28 JUL 00:00Z
    An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices
    cvelistv5