PT-2025-32198 · Marbella · Marbella Kr8S Dashcam Ff

Geo-Chen · Published 2025-08-06 · Updated 2025-08-07 · CVE-2025-30127

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Marbella KR8s Dashcam FF version 2.0.8

Description An issue exists on Marbella KR8s Dashcam FF 2.0.8 devices where video recordings, containing sensitive data such as routes, conversations, and footage, are accessible for download. This is achieved by establishing a socket connection to command port 7777, followed by downloading video data via port 7778 and audio data via port 7779, after gaining access through default, common, or cracked passwords.

Recommendations Change default or common passwords to strong, unique credentials. Restrict network access to ports 7777, 7778, and 7779.

Exploit

Fix

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-200

CWE-521

Related Identifiers

CVE-2025-30127

Affected Products

Marbella Kr8S Dashcam Ff

References · 9

• 🔥 https://github.com/geo-chen/Marbella/blob/main/README.md#finding-2---cve-2025-30127-video-recordings-open-to-being-downloaded-via-ports-7777-7778-7779 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-30127 · Security Note
• https://twitter.com/VulmonFeeds/status/1953226964967289177 · Twitter Post
• https://github.com/geo-chen/Marbella · Note
• https://t.me/CVEtracker/29373 · Telegram Post
• https://geochen.medium.com/marbella-dashcam-ab40ca41adec · Note
• https://makagps.com · Note
• https://twitter.com/offseq/status/1953335416083382457 · Twitter Post
• https://twitter.com/CVEnew/status/1953144140373606898 · Twitter Post