CVE-2025-30115

CRITICAL

9.8

Beschreibung

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Default Credentials Cannot Be Changed. It uses a fixed default SSID and password ("qwertyuiop"), which cannot be modified by users. The SSID is continuously broadcast, allowing unauthorized access to the device network.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht3/18/2025

Zuletzt geandert5/22/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

hella:dr_820hella:dr_820_firmware

Schwachen (CWE)

CWE-259

Referenzen

https://github.com/geo-chen/Hella(cve@mitre.org)

https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26(cve@mitre.org)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.