CVE-2025-30127

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices

Critical · published August 6, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

🚨 A default password is all it takes to expose sensitive video and audio recordings from Marbella KR8s Dashcam devices! 🔥 Think of it like leaving your car unlocked with the keys in the ignition — anyone can hop in and drive off with your secrets. Just like that open car, these devices are vulnerable if the entry door is left wide open! An attacker could easily gain access to sensitive video recordings, including specific routes and private conversations, all by using default or easily guessed passwords. This could lead to serious privacy violations, putting both individuals and their locations at risk. Imagine a stranger having complete access to your daily travels and personal discussions!

Put simply

Think of it like leaving your car unlocked with the keys in the ignition — anyone can hop in and drive off with your secrets. Just like that open car, these devices are vulnerable if the entry door is left wide open! This vulnerability allows unauthorized access to the dashcam's video and audio feeds through unprotected command ports (7777, 7778, and 7779) after successfully logging in with weak passwords. Once inside, attackers can download sensitive recordings without raising any alarms.

What to do

An attacker could easily gain access to sensitive video recordings, including specific routes and private conversations, all by using default or easily guessed passwords. This could lead to serious privacy violations, putting both individuals and their locations at risk. Imagine a stranger having complete access to your daily travels and personal discussions! Immediately change any default or weak passwords on your Marbella KR8s Dashcam devices. Additionally, consider implementing network-level security measures, such as firewalls, to restrict access to sensitive ports. Stay updated with the latest firmware releases to mitigate risks. You've got this! Secure your dashcam now and protect your privacy — it's time to be a security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00446 · 37.7th percentile
Published
2025-08-06T00:00Z
EPSS history
Timeline
  • 06 AUG 00:00Z
    An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices
    cvelistv5