How to fix CVE-2025-2120?

During next maintenance window: Apply vendor patches when convenient. Verify cleartext storage controls are in place.

Is F800 Pro Firmware affected by CVE-2025-2120?

CVE-2025-2120 is a low-severity vulnerability in Thinkware Car Dashcam F800 Pro involving cleartext storage (CVSS 2.4). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.

F800 Pro Firmware CVE-2025-2120

LOW

Cleartext Storage of Sensitive Information (CWE-312)

2025-03-09 [email protected]

Information Disclosure F800 Pro Firmware

2.4

CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:30 vuln.today

PoC Detected

Jul 22, 2025 - 14:31 vuln.today

Public exploit code

CVE Published

Mar 09, 2025 - 11:15 nvd

LOW 2.4

DescriptionNVD

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as problematic. This issue affects some unknown processing of the file /tmp/hostapd.conf of the component Configuration File Handler. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. Rated low severity (CVSS 2.4), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-312. A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as problematic.conf of the component Configuration File Handler. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected products include: Thinkware F800 Pro Firmware. Version information: up to 20250226..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2025-2120 vulnerability details – vuln.today

Back