CVE-2025-2344mediumCWE-287CWE-306

CVE-2025-2344: fallo de gravedad media en IROAD Dash Cam X5

IROAD Dash Cam X5/Dash Cam X6 API Endpoint missing authentication

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Dash Cam X5+ Monitorear Dash Cam X6

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.9epss 0.5%
A vulnerability, which was classified as critical, has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. Affected by this issue is some unknown functionality of the component API Endpoint. The manipulation leads to missing authentication. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
IROAD · Dash Cam X5IROAD · Dash Cam X6
CVEs relacionadas — IROAD Dash Cam X5

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-2345CRITICALIROAD Dash Cam X5/Dash Cam X6 improper authorizationEPSS 0.8%CVE-2025-2343HIGHIROAD Dash Cam X5/Dash Cam X6 Device Pairing hard-coded credentialsEPSS 0.4%CVE-2025-2341LOWIROAD Dash Cam X5 SSID default credentialsEPSS 0.3%CVE-2025-2346MEDIUMIROAD Dash Cam X5/Dash Cam X6 Domain origin validationEPSS 0.2%