PT-2025-31103 · Marbella · Marbella Kr8S Dashcam Ff

Published 2025-07-28 · Updated 2025-07-28 · CVE-2025-30126

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Marbella KR8s Dashcam FF version 2.0.8

Description An issue exists on Marbella KR8s Dashcam FF 2.0.8 devices that allows a remote attacker to disable recording, delete recordings, or disable battery protection via port 7777 without requiring pairing or physical button interaction. There are no indications or sounds on the dashcam to alert the owner when these changes are made.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-30126

Affected Products

Marbella Kr8S Dashcam Ff

References · 6

• 🔥 https://github.com/geo-chen/IROAD-V?tab=readme-ov-file#finding-7---cve-2025-30108-exposed-ftp-administrator-credentials · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-30126 · Security Note
• https://geochen.medium.com/marbella-dashcam-ab40ca41adec · Note
• https://makagps.com · Note
• https://twitter.com/CVEnew/status/1949837458394276207 · Twitter Post
• https://github.com/geo-chen/Marbella · Note