PT-2025-11615 · Forvia Hella · Forvia Hella Hella Driving Recorder Dr 820

Publicado 2025-03-18 · Atualizado 2025-03-21 · CVE-2025-30115

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Forvia Hella HELLA Driving Recorder DR 820 (affected versions not specified)

Description An issue was discovered where the device uses a fixed default SSID and password ("qwertyuiop"), which cannot be modified by users. The SSID is continuously broadcast, allowing unauthorized access to the device network.

Recommendations For the Forvia Hella HELLA Driving Recorder DR 820, consider changing the default password to a unique and strong password as soon as possible, if a method to do so becomes available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-259

Identificadores relacionados

CVE-2025-30115

Produtos afetados

Forvia Hella Hella Driving Recorder Dr 820

Referências · 7

• https://t.me/cvedetector/20581 · Publicação no Telegram
• https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26 · Nota
• https://t.me/cvenotify/115646 · Publicação no Telegram
• https://t.me/cvetracker/19376 · Publicação no Telegram
• https://github.com/geo-chen/Hella · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-30115 · Nota de Segurança
• https://twitter.com/CVEnew/status/1902009888244371686 · Publicação no Twitter