Is CVE-2025-30142 actively exploited?

No active exploitation of CVE-2025-30142 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-30142 be exploited remotely?

Partially. CVE-2025-30142 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2025-30142?

CVE-2025-30142 has a CVSS score of 8.1 (HIGH).

HOME VULNERABILITIESCVE-2025-30142

HIGH

CVE-2025-30142

CWE-290Published: March 18, 2025· Updated: Jun 17, 2026

8.1

CVSS v3.1

Official Description

An issue was discovered on G-Net Dashcam BB GONX devices. Bypassing of Device Pairing can occur. It uses MAC address verification as the sole mechanism for recognizing paired devices, allowing attackers to bypass authentication. By capturing the MAC address of an already-paired device through ARP scanning or other means, an attacker can spoof the MAC address and connect to the dashcam without going through the pairing process. This enables full access to the device.

NVD Source

Technical Analysis

CVE-2025-30142 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), with a CVSS base score of 8.1.