PT-2025-11616
CVE-2025-30116
·
Published
2025-03-18
·
Updated
2025-03-18
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Forvia Hella HELLA Driving Recorder DR 820 (affected versions not specified)
Description
An issue allows remote attackers to access and download recorded video footage from the SD card via port 9091. Additionally, attackers can connect to port 9092 to stream the live video feed by bypassing the challenge-response authentication mechanism, exposing sensitive location and personal data.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾