Hella's vulnerability profile centers on its DR 820 vehicle dashcam recorder and associated firmware, a niche but operational-visibility product deployed in fleet and commercial-vehicle environments. The recurring security signal involves authentication and credential-handling weaknesses—improper authentication, improper authorization, and the use of hard-coded credentials—that are characteristic of embedded device firmware where access control and secrets management are often secondary to core functionality. Current exploitation activity, severity breakdown, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Hella over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-30113CRITICAL An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials exist in the APK for Ports 9091 and 9092. The dashcam's Android application contain | Mar 18, 2025 | 9.8 | 26 | NO | NO |
CVE-2025-30115CRITICAL An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Default Credentials Cannot Be Changed. It uses a fixed default SSID and password ("qwertyuiop"), which ca | Mar 18, 2025 | 9.8 | 25 | NO | NO |
CVE-2025-30114CRITICAL An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Bypassing of Device Pairing can occur. The pairing mechanism relies solely on the connecting device's MAC | Mar 18, 2025 | 9.1 | 24 | NO | NO |
CVE-2025-30117HIGH An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unautho | Mar 18, 2025 | 7.3 | 21 | NO | NO |
CVE-2025-30116HIGH An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Remotely Dumping of Video Footage and the Live Video Stream can occur. It allows remote attackers to acce | Mar 18, 2025 | 7.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Hella.
Media articles that mention a CVE ID that affects a product developed by Hella — matched by CVE ID, not by vendor name.