Which versions of F800 Pro Firmware are affected by CVE-2025-2120?

CVE-2025-2120 is a low-severity vulnerability in Thinkware Car Dashcam F800 Pro involving cleartext storage (CVSS 2.4).

Is there a public PoC exploit available for CVE-2025-2120?

Yes, a public proof-of-concept exploit is available for CVE-2025-2120. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-2120?

During next maintenance window: Apply vendor patches when convenient. Verify cleartext storage controls are in place.

F800 Pro Firmware CVE-2025-2120

Q: What is the CVSS score of CVE-2025-2120?

CVE-2025-2120 has a CVSS 4.0 base score of 2.4 (Low). CVSS vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

LOW

Cleartext Storage of Sensitive Information (CWE-312)

2025-03-09 cna@vuldb.com

Information Disclosure F800 Pro Firmware Thinkware

2.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.4 LOW

CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:30 vuln.today

PoC Detected

Jul 22, 2025 - 14:31 vuln.today

Public exploit code

CVE Published

Mar 09, 2025 - 11:15 nvd

LOW 2.4

DescriptionCVE.org

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as problematic. This issue affects some unknown processing of the file /tmp/hostapd.conf of the component Configuration File Handler. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. Rated low severity (CVSS 2.4), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-312. A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as problematic.conf of the component Configuration File Handler. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected products include: Thinkware F800 Pro Firmware. Version information: up to 20250226..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.