CVE-2025-2345criticalCWE-266CWE-285

CVE-2025-2345: critical vulnerability in IROAD Dash Cam X5

IROAD Dash Cam X5/Dash Cam X6 improper authorization

Published · Updated

Follow this CVE+ Monitor Dash Cam X5+ Monitor Dash Cam X6

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.8%
A vulnerability, which was classified as very critical, was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. This affects an unknown part. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
IROAD · Dash Cam X5IROAD · Dash Cam X6
Related CVEs — IROAD Dash Cam X5

In the same product, most dangerous first.

CVE-2025-2344MEDIUMIROAD Dash Cam X5/Dash Cam X6 API Endpoint missing authenticationEPSS 0.5%CVE-2025-2343HIGHIROAD Dash Cam X5/Dash Cam X6 Device Pairing hard-coded credentialsEPSS 0.4%CVE-2025-2341LOWIROAD Dash Cam X5 SSID default credentialsEPSS 0.3%CVE-2025-2346MEDIUMIROAD Dash Cam X5/Dash Cam X6 Domain origin validationEPSS 0.2%