CVE-2025-30127 Information disclosure in n/a
Attackers with weak credentials can download sensitive video and audio recordings from Marbella KR8s Dashcams via specific network ports.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-30127?
CVE-2025-30127 is a critical vulnerability in n/a, published on 6 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or cracked passwords, the video recordings (containing sensitive routes, conversations, and footage) are open for downloading by creating a socket to command port 7777, and then downloading video via port 7778 and audio via port 7779.
Which versions are affected by CVE-2025-30127?
How do I fix CVE-2025-30127?
No fix has been published for CVE-2025-30127 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-30127 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-30127 exists.
Sources
Also known as GHSA-2454-2h9h-6wx6.