CVE-2025-30109

In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

PT-2025-11605

Name of the Vulnerable Software and Affected Versions IROAD APK version 5.2.5 Description The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

PT-2025-11601

Name of the Vulnerable Software and Affected Versions IROAD version v9 Description The issue concerns hardcoded default credentials, specifically qwertyuiop, which are used by the dashcam and cannot be altered by the user. This setup allows an attacker, who is within Wi-Fi range, to connect to th...

CVE-2025-30109

The IROAD APK version 5.2.5 contains hardcoded credentials for ports 9091 and 9092 within the mobile application for the dashcam. An attacker on the local Wi-Fi network can exploit these credentials to access API endpoints and retrieve sensitive device information, including live and recorded foo...

CVE-2025-30113

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials exist in the APK for Ports 9091 and 9092. The dashcam's Android application contains hardcoded credentials that allow unauthorized access to device settings through ports 9091 and 9092. These...

CVE-2025-30109: Use of Hard-coded Credentials

In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

CVE-2025-30113: Use of Hard-coded Credentials

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials exist in the APK for Ports 9091 and 9092. The dashcam's Android application contains hardcoded credentials that allow unauthorized access to device settings through ports 9091 and 9092. These...

CVE-2025-30109

In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

CVE-2025-30106

On IROAD v9 devices, the dashcam has hardcoded default credentials "qwertyuiop" that cannot be changed by the user. This allows an attacker within Wi-Fi range to connect to the device's network to perform sniffing...

CVE-2025-30137

An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to...

CVE-2025-30137

The G-Net GNET APK version 2.6.2 contains hardcoded credentials that grant unauthorized access to dashcam API endpoints on ports 9091 and 9092 . Specifically, the credentials for port 9091 are admin + 000000 (allowing an attacker to list settings via a crafted TibetList command), while port 9092 ...

CVE-2025-30109

In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

PT-2025-11641

Name of the Vulnerable Software and Affected Versions G-Net GNET APK version 2.6.2 Description An issue was discovered in the GNET mobile application where hardcoded credentials exist for ports 9091 and 9092, providing unauthorized access to the dashcam's API endpoints. The credentials for port...

PT-2025-11619

Name of the Vulnerable Software and Affected Versions ROADCAM X3 devices affected versions not specified Description An issue was discovered where the mobile app APK, Viidure, contains hardcoded FTP credentials for the FTPX user account. This enables attackers to gain unauthorized access and...

GNET G-ONX security vulnerabilities

GNET G-ONX is a series of car recorders from GNET. A security vulnerability exists in GNET G-ONX version 2.6.2, which stems from the inclusion of hard-coded credentials in the APK that could lead to unauthorized access...

CVE-2025-30123

An issue was discovered on ROADCAM X3 devices. The mobile app APK Viidure contains hardcoded FTP credentials for the FTPX user account, enabling attackers to gain unauthorized access and extract sensitive recorded footage from the device...

CVE-2025-30113

The Forvia Hella HELLA Driving Recorder DR 820 is affected by a vulnerability involving hardcoded credentials within its Android application (APK). These credentials, stored in cleartext , are used for Ports 9091 and 9092 . An attacker who gains access to the dashcam's network can exploit these c...

CVE-2025-30137: Use of Hard-coded Credentials

An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to...

CVE-2025-30137

An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to...

CVE-2025-30106

IROAD v9 dashcams are vulnerable to a security flaw involving hardcoded default credentials ("qwertyuiop"). Because these credentials cannot be changed by the user, an attacker within Wi-Fi range can connect to the device's network to perform sniffing and intercept network traffic. As a temporary...