CVE-2025-30139

The G-Net Dashcam BB GONX device continuously broadcasts its SSID with factory-set, immutable access credentials (CWE-1392: use of default credentials). Since the user has no ability to change these credentials, anyone within the range of the camera's Wi-Fi network can connect to it by knowing the widely available or easily guessable default password. Once connected to the camera's network, an attacker can perform traffic sniffing of other devices connected to the same network, such as the vehicle owner's smartphone.

An attacker within Wi-Fi range can connect to the camera's network without authorization and subsequently intercept network traffic from user devices (e.g., smartphone), which may lead to disclosure of sensitive data (violation of confidentiality, integrity, and availability).

Apply patches available from the manufacturer according to the references provided. Until a fix is released, it is recommended to limit the device's exposure (e.g., disabling the camera's Wi-Fi function when not actively in use) and monitor unauthorized connections to the camera's network.

G-Net Dashcam BB GONX devices (firmware and hardware designated as Gnetsystem G-Onx / G-Onx Firmware) — specific versions indicated in manufacturer references