CVE-2025-2348mediumCWE-200CWE-284

CVE-2025-2348: falha de média gravidade em IROAD Dash Cam FX2

IROAD Dash Cam FX2 HTTP/RTSP event information disclosure

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Dash Cam FX2

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.2%
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been classified as problematic. Affected is an unknown function of the file /mnt/extsd/event/ of the component HTTP/RTSP. The manipulation leads to information disclosure. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
IROAD · Dash Cam FX2
CVEs relacionadas — IROAD Dash Cam FX2

No mesmo produto, das mais perigosas para as menos.

CVE-2025-2350MEDIUMIROAD Dash Cam FX2 upload_file unrestricted uploadEPSS 0.3%CVE-2025-2347MEDIUMIROAD Dash Cam FX2 Device Registration default passwordEPSS 0.2%CVE-2025-2349LOWIROAD Dash Cam FX2 Password Hash passwd weak password hashEPSS 0.2%