CVE-2025-30115

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Mar 18, 2025
Updated: Mar 21, 2025
CWE ID 259

Summary

CVE-2025-30115 is a vulnerability affecting the Forvia Hella HELLA Driving Recorder DR 820. The issue resides in the device's inability to change its default credentials and SSID. The recorder uses the fixed password "qwertyuiop" which cannot be modified by users. Moreover, the device continually broadcasts its default SSID, increasing the risk of unauthorized access to the device network. This weakness may allow attackers to gain control of the device and potentially access sensitive information. Users are advised to apply the necessary patches or updates as soon as they become available.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share