Hella vulnerabilities
We track 5 vulnerabilities in Hella products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on March 18, 2025.
Latest Hella vulnerabilities
- 7.3 High severity
Dr 820 Firmware: Improper Authorization
An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. After bypassing the device pairing, an attacker can obtain sensit
- 7.5 High severity
Dr 820 Firmware: Improper Authentication
An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Remotely Dumping of Video Footage and the Live Video Stream can occur. It allows remote attackers to access and download recorded video footage from the SD card via port 9091. Additiona
- 9.8 Critical severity
Dr 820 Firmware: Use of Hard-coded Password
An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Default Credentials Cannot Be Changed. It uses a fixed default SSID and password ("qwertyuiop"), which cannot be modified by users. The SSID is continuously broadcast, allowing unauthor
- 9.1 Critical severity
Dr 820 Firmware: Improper Authentication
An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Bypassing of Device Pairing can occur. The pairing mechanism relies solely on the connecting device's MAC address. By obtaining the MAC address through network scanning and spoofing it,
- 9.8 Critical severity
Dr 820 Firmware: Use of Hard-coded Credentials
An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials exist in the APK for Ports 9091 and 9092. The dashcam's Android application contains hardcoded credentials that allow unauthorized access to device settings throug