PT-2025-31106 · Marbella · Marbella Kr8S Dashcam Ff

Published 2025-07-28 · Updated 2025-07-28 · CVE-2025-30125

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Marbella KR8s Dashcam FF version 2.0.8

Description Marbella KR8s Dashcam FF 2.0.8 devices are shipped with default credentials of 12345678, creating an insecure-by-default condition. Passwords can be limited to 8 characters, which can be cracked in approximately 8 hours using low-end commercial cloud resources.

Recommendations Change the default password on Marbella KR8s Dashcam FF version 2.0.8. Use a password longer than 8 characters on Marbella KR8s Dashcam FF version 2.0.8.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-30125

Affected Products

Marbella Kr8S Dashcam Ff

References · 8

• 🔥 https://github.com/geo-chen/Marbella/blob/main/README.md#finding-1---cve-2025-30125-same-default-credentials-and-limited-password-combinations · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-30125 · Security Note
• https://twitter.com/CVEnew/status/1949844716348166388 · Twitter Post
• https://t.me/CVEtracker/28578 · Telegram Post
• https://github.com/geo-chen/Marbella · Note
• https://geochen.medium.com/marbella-dashcam-ab40ca41ade · Note
• https://protiviti.com/sg-en/blogs/6259-8-character-password-still-dead · Note
• https://makagps.com · Note