CVEvulnerability
CVE-2025-30127
9.8 CRITICAL
Official page ↗
- Status
- Deferred
- Published
- 2025-08-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-200, CWE-284, CWE-521
Description
An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or cracked passwords, the video recordings (containing sensitive routes, conversations, and footage) are open for downloading by creating a socket to command port 7777, and then downloading video via port 7778 and audio via port 7779.
Related
References
- https://geochen.medium.com/marbella-dashcam-ab40ca41adec geochen.medium.com
- https://github.com/geo-chen/Marbella/ github.com
- https://github.com/geo-chen/Marbella/blob/main/README.md#finding-2---cve-2025-30127-video-recordings-open-to-being-downloaded-via-ports-7777-7778-7779 github.com
- https://makagps.com/ makagps.com