Forvia Hella Driving Recorder DR 820 Settings Management and Battery Sabotage Vulnerability

A vulnerability exists in the Forvia Hella Driving Recorder DR 820, allowing unauthorized parties to manage settings, access sensitive user and vehicle data, and disrupt the car's battery. After bypassing the device pairing, an attacker can use the settings interface to retrieve confidential information and modify power management options. This exploitation could disable recording, delete saved footage, and turn off battery protection, potentially causing the vehicle's battery to drain and leading to denial-of-service conditions.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive user and vehicle information, manipulation of power management settings, and disruption of the vehicle's battery, causing it to drain.