| Titel | Marbella Dashcam KR8S, KRX Use of Default Credentials |
|---|
| Beschreibung | Same default credentials and limited password combinations
All dashcams were shipped with the same default credentials of 12345678 which creates a "insecure-by-default" setup. For users who change their passwords, it's limited to 8 characters. According to https://www.protiviti.com/sg-en/blogs/6259-8-character-password-still-dead, a 8-char password takes a maximum of 8 hours to be cracked on an AWS box. |
|---|
| Quelle | ⚠️ https://github.com/geo-chen/Marbella#finding-1-same-default-credentials-and-limited-password-combinations |
|---|
| Benutzer | geochen (UID 78995) |
|---|
| Einreichung | 16.03.2025 02:00 (vor 1 Jahr) |
|---|
| Moderieren | 20.03.2025 23:49 (5 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 300539 [Marbela Dashcam KR8S/Dashcam KRX Remote Code Execution] |
|---|
| Punkte | 19 |
|---|