CVE-2025-2350mediumCWE-284CWE-434

CVE-2025-2350: falha de média gravidade em IROAD Dash Cam FX2

IROAD Dash Cam FX2 upload_file unrestricted upload

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Dash Cam FX2

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.3%
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been rated as critical. Affected by this issue is some unknown functionality of the file /action/upload_file. The manipulation leads to unrestricted upload. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
IROAD · Dash Cam FX2
CVEs relacionadas — IROAD Dash Cam FX2

No mesmo produto, das mais perigosas para as menos.

CVE-2025-2347MEDIUMIROAD Dash Cam FX2 Device Registration default passwordEPSS 0.2%CVE-2025-2348MEDIUMIROAD Dash Cam FX2 HTTP/RTSP event information disclosureEPSS 0.2%CVE-2025-2349LOWIROAD Dash Cam FX2 Password Hash passwd weak password hashEPSS 0.2%