Published
2025-07-28
·
Updated
2025-07-28
·
CVE-2025-30125
9.8
Critical
| Base vector | Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Marbella KR8s Dashcam FF version 2.0.8
Description:
Marbella KR8s Dashcam FF 2.0.8 devices are shipped with default credentials of `12345678`, creating an insecure-by-default condition. Passwords can be limited to 8 characters, which can be cracked in approximately 8 hours using low-end commercial cloud resources.
Recommendations:
Change the default password on Marbella KR8s Dashcam FF version 2.0.8.
Use a password longer than 8 characters on Marbella KR8s Dashcam FF version 2.0.8.
Exploit
Fix
Using Hardcoded Credentials