Forvia Hella Driving Recorder DR 820 Device Pairing Bypass Vulnerability

A vulnerability exists in the Forvia Hella HELLA Driving Recorder DR 820, allowing attackers to bypass the device pairing process. The pairing mechanism depends solely on the MAC address of the connecting device. By scanning the network to obtain the MAC address and then spoofing it, an attacker can circumvent authentication and gain unauthorized access to the dashcam's features.

Impact

Exploitation of this vulnerability allows for unauthorized access to the dashcam's features, bypassing the intended pairing and authentication process.