An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Remotely Dumping of Video Footage and the Live Video Stream can occur. It allows remote attackers to access and download recorded video footage from the SD card via port 9091. Additionally, attackers can connect to port 9092 to stream the live video feed by bypassing the challenge-response authentication mechanism. This exposes sensitive location and personal data.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/geo-chen/Hella | Third Party Advisory |
| https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26 | Permissions Required |
Configurations
Configuration 1 (hide)
| AND |
|
History
22 May 2025, 19:43
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Hella dr 820
Hella dr 820 Firmware Hella |
|
| References | () https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26 - Permissions Required | |
| References | () https://github.com/geo-chen/Hella - Third Party Advisory | |
| CPE | cpe:2.3:o:hella:dr_820_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:hella:dr_820:-:*:*:*:*:*:*:* |
18 Mar 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-18 15:16
Updated : 2025-05-22 19:43
NVD link : CVE-2025-30116
Mitre link : CVE-2025-30116
JSON object : View
Products Affected
hella
- dr_820
- dr_820_firmware
CWE
No CWE.