CVE-2025-2121 - Thinkware Car Dashcam F800 Pro File Storage access control

Back Back to CVE browser

MEDIUM

Thinkware Car Dashcam F800 Pro File Storage access control

Published Mar 9, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.96%

Description

A vulnerability classified as critical has been found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected is an unknown function of the component File Storage. The manipulation leads to improper access controls. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Thinkware Product Car Dashcam F800 Pro Default
n/a
- Version
  20250226
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Thinkware

Car Dashcam F800 Pro

n/a

Version	Status	Constraints
20250226	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-266

Incorrect Privilege Assignment

CWE-284

References (4)

https://github.com/geo-chen/Thinkware-Dashcam
exploitThird Party Advisory
https://vuldb.com/?ctiid.299034
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.299034
vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.507328
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://github.com/geo-chen/Thinkware-Dashcam		exploitThird Party Advisory
https://vuldb.com/?ctiid.299034		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.299034		vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.507328		third-party-advisoryThird Party AdvisoryVDB Entry