CVE-2025-30127

critical · 9.8

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or cracked passwords, the video recordings (containing sensitive routes, conversations, and footage) are open for downloading by creating a socket to command port 7777, and then downloading video via port 7778 and audio via port 7779.

9.8

CVSS

0.4%

EPSS (exploit prob.)

37th

EPSS percentile

2025-08-06

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-200CWE-284CWE-521

References

https://geochen.medium.com/marbella-dashcam-ab40ca41adec
https://github.com/geo-chen/Marbella/
https://github.com/geo-chen/Marbella/blob/main/README.md#finding-2---cve-2025-30127-video-recordings-open-to-being-downloaded-via-ports-7777-7778-7779
https://makagps.com/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-30127