CVE-2025-2345criticalCWE-266CWE-285

CVE-2025-2345: fallo crítico en IROAD Dash Cam X5

IROAD Dash Cam X5/Dash Cam X6 improper authorization

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Dash Cam X5+ Monitorear Dash Cam X6

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.3epss 0.8%
A vulnerability, which was classified as very critical, was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. This affects an unknown part. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
IROAD · Dash Cam X5IROAD · Dash Cam X6
CVEs relacionadas — IROAD Dash Cam X5

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-2344MEDIUMIROAD Dash Cam X5/Dash Cam X6 API Endpoint missing authenticationEPSS 0.5%CVE-2025-2343HIGHIROAD Dash Cam X5/Dash Cam X6 Device Pairing hard-coded credentialsEPSS 0.4%CVE-2025-2341LOWIROAD Dash Cam X5 SSID default credentialsEPSS 0.3%CVE-2025-2346MEDIUMIROAD Dash Cam X5/Dash Cam X6 Domain origin validationEPSS 0.2%