CVE-2025-30139

An issue was discovered on G-Net Dashcam BB GONX devices

Critical · published March 18, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

🚨 Hold onto your dashboard! G-Net Dashcam BB GONX devices have a critical security flaw that allows attackers to connect without any barriers! 🔥 It's like leaving the doors to your car wide open while announcing the PIN to your car alarm on a loudspeaker — anyone nearby can simply waltz in and access everything. An attacker could easily connect to your dashcam's network, snooping on any devices linked to it, including your smartphone. Imagine someone eavesdropping on your conversations or collecting sensitive data, leading to potential identity theft or even stalking. This vulnerability is absolutely devastating!

Put simply

It's like leaving the doors to your car wide open while announcing the PIN to your car alarm on a loudspeaker — anyone nearby can simply waltz in and access everything. This vulnerability arises from hardcoded default SSID credentials that cannot be changed, allowing any nearby attacker to connect without restrictions and intercept traffic between devices on the network.

What to do

An attacker could easily connect to your dashcam's network, snooping on any devices linked to it, including your smartphone. Imagine someone eavesdropping on your conversations or collecting sensitive data, leading to potential identity theft or even stalking. This vulnerability is absolutely devastating! To mitigate this threat, immediately disconnect the dashcam from the network and check for any firmware updates that address this issue. If no updates are available, consider replacing the device with one that has customizable security settings. Always ensure your networks have strong, unique passwords! You've got this! Just take action, and you’ll be well on your way to securing your devices! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00421 · 35.4th percentile
Published
2025-03-18T00:00Z
EPSS history
Timeline
  • 18 MAR 00:00Z
    An issue was discovered on G-Net Dashcam BB GONX devices
    cvelistv5