CVE-2025-30126 Details
Description
An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Via port 7777 without any need to pair or press a physical button, a remote attacker can disable recording, delete recordings, or even disable battery protection to cause a flat battery to essentially disable the car from being used. During the process of changing these settings, there are no indications or sounds on the dashcam to alert the dashcam owner that someone else is making those changes.
A vulnerability exists in the Marbella KR8s Dashcam model FF 2.0.8, allowing remote attackers to manipulate the device's settings without authentication. Exploitation can be done through port 7777, where attackers can disable recording, delete saved footage, or turn off battery protection, leading to a drained battery that renders the vehicle inoperable. Notably, these changes occur silently, without any alerts or notifications to the dashcam owner.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 28, 2025CISA-ADP
Assessed Jul 30, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://geochen.medium.com/marbella-dashcam-ab40ca41adec | [email protected] | ExploitTechnical Analysis |
| https://github.com/geo-chen/IROAD-V?tab=readme-ov-file#finding-7---cve-2025-30108-exposed-ftp-administrator-credentials | [email protected] | BundleTechnical Analysis |
| https://github.com/geo-chen/Marbella/ | [email protected] | BundleTechnical Analysis |
| https://makagps.com/ | [email protected] | Vendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-306 | Missing Authentication for Critical Function | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| Marbella KR8s | All versions |
CPE
Remediation
| |
| Marbella KRX | All versions |
CPE
Remediation
| |
| IROAD Q9 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jul 30, 2025 | CVE Modified | CISA-ADP |
| Jul 28, 2025 | New CVE Received | [email protected] |