Access Control Vulnerability in Thinkware Car Dashcam F800 Pro
CVE-2025-2121

5.3MEDIUM

Key Information:

Vendor

Thinkware

Status
Car Dashcam F800 Pro
Vendor
CVE Published:
9 March 2025

Badges

👾 Exploit Exists

What is CVE-2025-2121?

A notable vulnerability has been identified in the Thinkware Car Dashcam F800 Pro, specifically concerning the File Storage component. This flaw enables improper access controls, potentially allowing unauthorized users within the local network to manipulate sensitive files. Despite prior disclosure attempts to the vendor, no response has been received regarding the issue. It's crucial for users to be aware of this vulnerability to protect their devices and sensitive data from possible exploitation.

Affected Version(s)

Car Dashcam F800 Pro 20250226

References

https://vuldb.com/?id.299034
vdb-entry
https://vuldb.com/?ctiid.299034
signaturepermissions-required
https://vuldb.com/?submit.507328
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

geochen (VulDB User)
.