CVE-2025-30115

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Default Credentials Cannot Be Changed. It uses a fixed default SSID and password ("qwertyuiop"), which cannot be modified by users. The SSID is continuously broadcast, allowing unauthorized access to the device network.

• CWE-259

• https://github.com/geo-chen/HellaThird Party Advisory
• https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26Permissions Required

Published

Mar 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-3011SOOP-CLM from PiExtract has a SQL Injection vulnerability, a…9.8
• CVE-2025-30110On IROAD X5 devices, a Bypass of Device Pairing can occur vi…6.5
• CVE-2025-30111On IROAD v9 devices, one can Remotely Dump Video Footage and…7.5
• CVE-2025-30112On 70mai Dash Cam 1S devices, by connecting directly to the …7.1
• CVE-2025-30113An issue was discovered on the Forvia Hella HELLA Driving Re…9.8
• CVE-2025-30114An issue was discovered on the Forvia Hella HELLA Driving Re…9.1
• CVE-2025-30116An issue was discovered on the Forvia Hella HELLA Driving Re…7.5
• CVE-2025-30117An issue was discovered on the Forvia Hella HELLA Driving Re…7.3
• CVE-2025-30118An issue was discovered on the Audi Universal Traffic Record…7.5
• CVE-2025-3012In dpc modem, there is a possible system crash due to null p…7.5
• CVE-2025-30122An issue was discovered on ROADCAM X3 devices. It has a unif…9.8
• CVE-2025-30123An issue was discovered on ROADCAM X3 devices. The mobile ap…9.8