CVE-2025-30117
HIGHForvia Hella HELLA Driving Recorder DR 820 - Info Disclosure
Title source: llmDescription
An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. After bypassing the device pairing, an attacker can obtain sensitive user and vehicle information through the settings interface. Remote attackers can modify power management settings, disable recording, delete stored footage, and turn off battery protection, leading to potential denial-of-service conditions and vehicle battery drainage.
References (2)
Core 2
Core References
Permissions Required
https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26
Scores
CVSS v3
7.3
EPSS
0.0008
EPSS Percentile
23.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-285
Status
published
Products (1)
hella/dr_820_firmware
Published
Mar 18, 2025
Tracked Since
Feb 18, 2026