Vulnerability · Published Mar 9, 2025 · Assigned by VulDB

CVE-2025-2119Thinkware Car Dashcam F800 Pro Device Registration default credentials

Low 2.0

In plain English

A low-severity security flaw in Car Dashcam F800 Pro from Thinkware. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 3.1)2.0Low

Exploit odds (30 days)0.3%top 82.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Thinkware	Car Dashcam F800 Pro	20250226

Weakness: CWE-1392 · Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References

VDB-299032 | Thinkware Car Dashcam F800 Pro Device Registration default credentials vdb-entry
VDB-299032 | CTI Indicators (IOB, IOC) signature, permissions-required
Submit #507326 | Thinkware Car Dashcam F800 Pro Authentication Bypass by Primary Weakness third-party-advisory
https://github.com/geo-chen/Thinkware-Dashcam exploit