Thinkware

A series of critical vulnerabilities in Thinkware’s F800 Pro dashcam have exposed user credentials and allowed unauthorized access to stored footage and live feeds, potentially compromising personal and commercial vehicle monitoring. The outlook for Thinkware is grim as these security flaws, which include plaintext credential storage, default authentication bypasses, and insecure data storage practices, leave the users' privacy at significant risk. Attackers with physical or network access to the dashcams could steal sensitive footage, impersonate users, or deploy ransomware, leading to widespread distrust and damage to Thinkware's reputation and customer trust.

Source: https://cybersecuritynews.com/thinkware-dashcam-vulnerability/

TPRM report: https://scoringcyber.rankiteo.com/company/thinkware

"id": "thi226031025",
"linkid": "thinkware",
"type": "Vulnerability",
"date": "3/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Electronics',
                        'name': 'Thinkware',
                        'type': 'Company'}],
 'attack_vector': ['Physical Access', 'Network Access'],
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['User Credentials',
                                              'Stored Footage',
                                              'Live Feeds']},
 'description': 'A series of critical vulnerabilities in Thinkware’s F800 Pro '
                'dashcam have exposed user credentials and allowed '
                'unauthorized access to stored footage and live feeds, '
                'potentially compromising personal and commercial vehicle '
                'monitoring.',
 'impact': {'brand_reputation_impact': 'Widespread Distrust and Damage to '
                                       "Thinkware's Reputation and Customer "
                                       'Trust',
            'data_compromised': ['User Credentials',
                                 'Stored Footage',
                                 'Live Feeds'],
            'identity_theft_risk': 'High',
            'systems_affected': ['Thinkware F800 Pro Dashcams']},
 'motivation': ['Data Theft', 'Impersonation', 'Ransomware Deployment'],
 'title': 'Thinkware F800 Pro Dashcam Vulnerabilities',
 'type': ['Vulnerability Exploitation', 'Unauthorized Access'],
 'vulnerability_exploited': ['Plaintext Credential Storage',
                             'Default Authentication Bypasses',
                             'Insecure Data Storage Practices']}