CVE-2025-2119

Published Mar 9, 2025

Last updated a month ago

Overview

Description
A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Source
cna@vuldb.com
NVD status
Received

Risk scores

CVSS 4.0

Type
Secondary
Base score
1
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity
LOW

CVSS 3.1

Type
Primary
Base score
2
Impact score
1.4
Exploitability score
0.5
Vector string
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity
LOW

CVSS 2.0

Type
Secondary
Base score
1.2
Impact score
2.9
Exploitability score
1.9
Vector string
AV:L/AC:H/Au:N/C:P/I:N/A:N

Weaknesses

cna@vuldb.com
CWE-1392

Social media

Hype score
Not currently trending
  1. 🚨 CVE-2025-2119 🟢 LOW (1) 🏢 Thinkware - Car Dashcam F800 Pro 🏗️ 20250226 🔗 https://t.co/ckVZWed5M7 🔗 https://t.co/P9KCC5Mqpf 🔗 https://t.co/Y0FyMSxVJL 🔗 https://t.co/8EuhXg6N2o #CyberCron #VulnAlert #InfoSec https://t.co/D3aFBMhxtm

    @cybercronai

    10 Mar 2025

    25 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. ⚠️ Vulnerability Alert: Thinkware Dashcam Credential Leakage 📅 Timeline: Disclosure: 2025-03-09, CVSS Assigned: 2025-03-09 📌 Attribution: 🆔cveId: CVE-2025-2119 📊baseScore: 2 📏cvssMetrics: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N cvssSeverity: Low 🟢 📈 EPSS Score:…

    @syedaquib77

    10 Mar 2025

    17 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. ⚠️ Thinkware Dashcam Vulnerability Let Attackers Extract the Credentials in Plain-text Read more: https://t.co/Df3uPuBI6h ✅ CVE-2025-2120: Plaintext Credential Storage ✅ CVE-2025-2119: Default Credential Exploitation https://t.co/eyfHOfFJ7A

    @The_Cyber_News

    10 Mar 2025

    296 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. CVE-2025-2119 A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the componen… https://t.co/B2SkY0e3fL

    @CVEnew

    9 Mar 2025

    732 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. New post from https://t.co/uXvPWJy6tj (CVE-2025-2119 | Thinkware Car Dashcam F800 Pro up to 20250226 Device Registration default credentials) has been published on https://t.co/shdfL36p3p

    @WolfgangSesin

    8 Mar 2025

    16 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes