CVE-2025-30113 – Forvia Hella HELLA Driving Recorder DR 820 Hardcoded Credentials Vulnerability

The following table lists the changes that have been made to the
CVE-2025-30113 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Mar. 18, 2025

    Action Type Old Value New Value
    Added Description An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials exist in the APK for Ports 9091 and 9092. The dashcam’s Android application contains hardcoded credentials that allow unauthorized access to device settings through ports 9091 and 9092. These credentials, stored in cleartext, can be exploited by an attacker who gains access to the dashcam’s network.
    Added Reference https://github.com/geo-chen/Hella
    Added Reference https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26
Share the Post:

Related Posts