Forvia Hella Driving Recorder DR 820 Default Credential Vulnerability

A vulnerability exists in the Forvia Hella Driving Recorder DR 820 due to the use of fixed default credentials that cannot be changed by users. The device comes with a preset SSID and password, which is broadcast continuously, allowing unauthorized access to the device's network. This issue is compounded by hardcoded credentials in the associated Android APK, which can be exploited to access device settings and features remotely.

Impact

Exploitation of this vulnerability allows unauthorized users to access the device's network, potentially leading to unauthorized management of the device and access to sensitive video footage and live streams from the camera.