Vulnerability in Gnetsystem G-Onx
CVE-2025-30139
An issue was discovered on G-Net Dashcam BB GONX devices. Default credentials for SSID cannot be changed. It broadcasts a fixed SSID with default credentials that cannot be changed. This allows any nearby attacker to connect to the dashcam's network without restriction. Once connected, an attacker can sniff on connected devices such as the user's smartphone. The SSID is also always broadcasted.
EPSS: 0.004 (31.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Gnetsystem G-onx
- Gnetsystem G-onx_firmware
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Product)
- cve@mitre.org (Third Party Advisory)
Frequently asked questions
- What is CVE-2025-30139?
- CVE-2025-30139 is a critical-severity vulnerability in Gnetsystem G-Onx, classified under CWE-1392. CVSS score: 9.8/10. Published 2025-03-18.
- How severe is CVE-2025-30139?
- Critical severity. CVSS v3 base score is 9.8 out of 10.
- Is CVE-2025-30139 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.