CVE-2025-30139 Hardcoded credentials in n/a
Attackers can connect to the dashcam's network using unchangeable default credentials to sniff traffic from connected devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-30139?
CVE-2025-30139 is a critical vulnerability in n/a, published on 18 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered on G-Net Dashcam BB GONX devices. Default credentials for SSID cannot be changed. It broadcasts a fixed SSID with default credentials that cannot be changed. This allows any nearby attacker to connect to the dashcam's network without restriction. Once connected, an attacker can sniff on connected devices such as the user's smartphone. The SSID is also always broadcasted.
Weakness: CWE-1392
Which versions are affected by CVE-2025-30139?
It affects 1 product.
Products include Gnetsystem G-Onx Firmware.
How do I fix CVE-2025-30139?
No fix has been published for CVE-2025-30139 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-30139 being exploited?
There is no known exploitation of CVE-2025-30139 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-8prv-26x4-96jv.