G-Net Dashcam BB GONX Pairing improper authentication

Summaryinfo

A vulnerability labeled as critical has been found in G-Net Dashcam BB GONX. This affects an unknown function of the component Pairing Handler. Such manipulation leads to improper authentication. This vulnerability is traded as CVE-2025-30142. Access to the local network is required for this attack to succeed. There is no exploit available.

Detailsinfo

A vulnerability, which was classified as critical, has been found in G-Net Dashcam BB GONX (the affected version unknown). Affected by this issue is an unknown part of the component Pairing Handler. The manipulation with an unknown input leads to a improper authentication vulnerability. Using CWE to declare the problem leads to CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. Impacted is confidentiality, integrity, and availability. CVE summarizes:

An issue was discovered on G-Net Dashcam BB GONX devices. Bypassing of Device Pairing can occur. It uses MAC address verification as the sole mechanism for recognizing paired devices, allowing attackers to bypass authentication. By capturing the MAC address of an already-paired device through ARP scanning or other means, an attacker can spoof the MAC address and connect to the dashcam without going through the pairing process. This enables full access to the device.

This vulnerability is handled as CVE-2025-30142 since 03/17/2025. The exploitation is known to be difficult. The attack needs to be done within the local network. There are neither technical details nor an exploit publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• G-Net

Name

• Dashcam BB GONX

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Duplicate

• Submit #XXXXXX: Xxxx Xxxxxxx X-xxx Xxxxxxxxxxxxxx Xxxxxx Xx Xxxxxxx Xxxxxxxx (by geochen)

Once again VulDB remains the best source for vulnerability data.

Discussion