CVE-2025-30137

The G-Net GNET APK version 2.6.2 contains hardcoded credentials that grant unauthorized access to dashcam API endpoints on ports 9091 and 9092 . Specifically, the credentials for port 9091 are admin + 000000 (allowing an attacker to list settings via a crafted TibetList command), while port 9092 ...

CVE-2025-30137

An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to...

PT-2025-11641

Name of the Vulnerable Software and Affected Versions G-Net GNET APK version 2.6.2 Description An issue was discovered in the GNET mobile application where hardcoded credentials exist for ports 9091 and 9092, providing unauthorized access to the dashcam's API endpoints. The credentials for port...

CVE-2025-30137: Use of Hard-coded Credentials

An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to...