CVE-2025-2346mediumCWE-345CWE-346

CVE-2025-2346: falha de média gravidade em IROAD Dash Cam X5

IROAD Dash Cam X5/Dash Cam X6 Domain origin validation

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Dash Cam X5+ Monitorar Dash Cam X6

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.2%
A vulnerability has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 and classified as problematic. This vulnerability affects unknown code of the component Domain Handler. The manipulation of the argument Domain Name leads to origin validation error. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
IROAD · Dash Cam X5IROAD · Dash Cam X6
CVEs relacionadas — IROAD Dash Cam X5

No mesmo produto, das mais perigosas para as menos.

CVE-2025-2345CRITICALIROAD Dash Cam X5/Dash Cam X6 improper authorizationEPSS 0.8%CVE-2025-2344MEDIUMIROAD Dash Cam X5/Dash Cam X6 API Endpoint missing authenticationEPSS 0.5%CVE-2025-2343HIGHIROAD Dash Cam X5/Dash Cam X6 Device Pairing hard-coded credentialsEPSS 0.4%CVE-2025-2341LOWIROAD Dash Cam X5 SSID default credentialsEPSS 0.3%