CVE-2025-30139

CRITICAL

G-Net Dashcam BB GONX - Info Disclosure

Title source: llm
STIX 2.1

Description

An issue was discovered on G-Net Dashcam BB GONX devices. Default credentials for SSID cannot be changed. It broadcasts a fixed SSID with default credentials that cannot be changed. This allows any nearby attacker to connect to the dashcam's network without restriction. Once connected, an attacker can sniff on connected devices such as the user's smartphone. The SSID is also always broadcasted.

Scores

CVSS v3 9.8
EPSS 0.0025
EPSS Percentile 48.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-1392
Status published
Products (1)
gnetsystem/g-onx_firmware
Published Mar 18, 2025
Tracked Since Feb 18, 2026