CVE-2025-2122

A vulnerability classified as problematic was found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected by this vulnerability is an unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
Link Resource
https://github.com/geo-chen/Thinkware-Dashcam Exploit Third Party Advisory
https://github.com/geo-chen/Thinkware-Dashcam Exploit Third Party Advisory
https://vuldb.com/?ctiid.299035 Permissions Required VDB Entry
https://vuldb.com/?id.299035 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:thinkware:f800_pro_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:thinkware:f800_pro:-:*:*:*:*:*:*:*

History

22 Jul 2025, 14:30

Type Values Removed Values Added
First Time Thinkware f800 Pro
Thinkware
Thinkware f800 Pro Firmware
CPE cpe:2.3:o:thinkwarestore:f800_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:thinkwarestore:f800_pro:-:*:*:*:*:*:*:*
cpe:2.3:o:thinkware:f800_pro_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:thinkware:f800_pro:-:*:*:*:*:*:*:*

28 May 2025, 18:32

Type Values Removed Values Added
First Time Thinkwarestore f800 Pro Firmware
Thinkwarestore f800 Pro
Thinkwarestore
CWE CWE-404
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
CPE cpe:2.3:o:thinkwarestore:f800_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:thinkwarestore:f800_pro:-:*:*:*:*:*:*:*
References () https://github.com/geo-chen/Thinkware-Dashcam - () https://github.com/geo-chen/Thinkware-Dashcam - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.299035 - () https://vuldb.com/?ctiid.299035 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.299035 - () https://vuldb.com/?id.299035 - Third Party Advisory, VDB Entry

10 Mar 2025, 16:15

Type Values Removed Values Added
CWE CWE-404
CVSS v2 : unknown
v3 : 3.1
v2 : unknown
v3 : unknown

09 Mar 2025, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-09 14:15

Updated : 2025-07-22 14:30


NVD link : CVE-2025-2122

Mitre link : CVE-2025-2122


JSON object : View

Products Affected

thinkware

  • f800_pro
  • f800_pro_firmware
CWE
CWE-404

Improper Resource Shutdown or Release