| Título | Marbella Dashcam KR8S, KRX Use of Default Credentials |
|---|
| Descripción | Same default credentials and limited password combinations
All dashcams were shipped with the same default credentials of 12345678 which creates a "insecure-by-default" setup. For users who change their passwords, it's limited to 8 characters. According to https://www.protiviti.com/sg-en/blogs/6259-8-character-password-still-dead, a 8-char password takes a maximum of 8 hours to be cracked on an AWS box. |
|---|
| Fuente | ⚠️ https://github.com/geo-chen/Marbella#finding-1-same-default-credentials-and-limited-password-combinations |
|---|
| Usuario | geochen (UID 78995) |
|---|
| Sumisión | 2025-03-16 02:00 (hace 1 Año) |
|---|
| Moderación | 2025-03-20 23:49 (5 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 300539 [Marbela Dashcam KR8S/Dashcam KRX Ejecución remota de código] |
|---|
| Puntos | 19 |
|---|