CVE-2025-2119

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-1392

• https://github.com/geo-chen/Thinkware-Dashcam
• https://vuldb.com/?ctiid.299032
• https://vuldb.com/?id.299032
• https://vuldb.com/?submit.507326

Published

Mar 9, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-21184Windows Core Messaging Elevation of Privileges Vulnerability7
• CVE-2025-21185Microsoft Edge (Chromium-based) Elevation of Privilege Vulne…6.5
• CVE-2025-21186Microsoft Access Remote Code Execution Vulnerability7.8
• CVE-2025-21187Microsoft Power Automate Remote Code Execution Vulnerability7.8
• CVE-2025-21188Azure Network Watcher VM Extension Elevation of Privilege Vu…6
• CVE-2025-21189MapUrlToZone Security Feature Bypass Vulnerability4.3
• CVE-2025-21190Windows Telephony Service Remote Code Execution Vulnerabilit…8.8
• CVE-2025-21191Time-of-check time-of-use (toctou) race condition in Windows…7
• CVE-2025-21193Active Directory Federation Server Spoofing Vulnerability6.5
• CVE-2025-21194Microsoft Surface Security Feature Bypass Vulnerability7.1
• CVE-2025-21195Improper link resolution before file access ('link following…6
• CVE-2025-21197Improper access control in Windows NTFS allows an authorized…6.5