PT-2025-31105 · Unknown · Marbella Kr8S Dashcam

Published 2025-07-28 · Updated 2025-07-28 · CVE-2025-30124

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Marbella KR8s Dashcam FF version 2.0.8

Description An issue exists where the existing password is written in cleartext onto a newly inserted SD card. An attacker with temporary physical access to the device can steal the password by swapping the SD card.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-30124

Affected Products

Marbella Kr8S Dashcam

References · 7

• 🔥 https://github.com/geo-chen/Marbella/blob/main/README.md#finding-4---cve-2025-30124-passwords-are-stored-in-plaintext-and-can-be-retrieved-with-physical-contact · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-30124 · Security Note
• https://twitter.com/VulmonFeeds/status/1949949478753964054 · Twitter Post
• https://twitter.com/CVEnew/status/1949837457421173089 · Twitter Post
• https://geochen.medium.com/marbella-dashcam-ab40ca41adec · Note
• https://makagps.com · Note
• https://github.com/geo-chen/Marbella · Note