Marbella KR8s Dashcam Default Password Vulnerability

A vulnerability exists in the Marbella KR8s Dashcam model FF 2.0.8, all of which were shipped with the same default password of '12345678'. This creates an insecure-by-default condition. Users who change their passwords can only set them to a maximum of 8 characters, a length that can be cracked within 8 hours using low-end commercial cloud resources.

Impact

The vulnerability allows for unauthorized access to the dashcam's Wi-Fi network, potentially leading to further exploitation of the device or its data.