CVE-2025-2121: Thinkware Car Dashcam F800 Pro File Storage access control

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-03-09 · updated 2026-06-17
Weakness: CWE-266

Description

A vulnerability classified as critical has been found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected is an unknown function of the component File Storage. The manipulation leads to improper access controls. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Thinkware Car Dashcam F800 Pro: all versions

References

https://github.com/geo-chen/Thinkware-Dashcam
https://vuldb.com/?ctiid.299034
https://vuldb.com/?id.299034
https://vuldb.com/?submit.507328
https://github.com/geo-chen/Thinkware-Dashcam

Get alerted when CVE-2025-2121 or the next vulnerability affects your stack