TI-2025-21478 Aliases CVE-2025-30138 GHSA-j7qg-qv7g-7xv8

An issue was discovered on G-Net Dashcam BB GONX devices.

LOW 20CWE-284Published 2025-03-18 · Updated 2025-03-25

Key facts

Attack vector: Physical
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: None · High · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-284.

Summary

An issue was discovered on G-Net Dashcam BB GONX devices. Managing Settings and Obtaining Sensitive Data and Sabotaging Car Battery can be performed by unauthorized persons. It allows unauthorized users to modify critical system settings once connected to its network. Attackers can extract sensitive car and driver information, mute dashcam alerts to prevent detection, disable recording functionality, or even factory reset the device. Additionally, they can disable battery protection, causing the dashcam to drain the car battery when left on overnight. These actions not only compromise privacy but also pose potential physical harm by rendering the dashcam non-functional or causing vehicle battery failure.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00182 7th percentileScored 2026-11-08

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:gnetsystem:g-onx_firmware:-:::::::*	not specified by NVD	Vulnerable	Gnetsystem
cpe:2.3:h:gnetsystem:g-onx:-:::::::*	not specified by NVD	Running on	Gnetsystem

cpe:2.3:o:gnetsystem:g-onx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Gnetsystem
cpe:2.3:h:gnetsystem:g-onx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Gnetsystem

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-30138
2026-10-03 Alias added: GHSA-j7qg-qv7g-7xv8

References

Advisory 1

https://github.com/geo-chen/GNET

Other 1

https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201

TI-2025-21479 An issue was discovered on G-Net Dashcam BB GONX devices. CVSS 3.1CRITICAL 9.8
TI-2025-21481 An issue was discovered on G-Net Dashcam BB GONX devices. CVSS 3.1HIGH 7.5
TI-2025-21480 An issue was discovered on G-Net Dashcam BB GONX devices. CVSS 3.1HIGH 7.5
TI-2025-21482 An issue was discovered on G-Net Dashcam BB GONX devices. CVSS 3.1HIGH 8.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences