CVE-2025-30126

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices

Medium · published July 28, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
28.5
In the wild
Unconfirmed
What it is

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Via port 7777 without any need to pair or press a physical button, a remote attacker can disable recording, delete recordings, or even disable battery protection to cause a flat battery to essentially disable the car from being used. During the process of changing these settings, there are no indications or sounds on the dashcam to alert the dashcam owner that someone else is making those changes.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00359 · 28.5th percentile
Published
2025-07-28T00:00Z
EPSS history
Timeline
  • 28 JUL 00:00Z
    An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices
    cvelistv5