Vulnerability · Published Mar 16, 2025 · Assigned by VulDB
CVE-2025-2345IROAD Dash Cam X5/Dash Cam X6 improper authorization
Critical 9.8
In plain English
A critical-severity security flaw in Dash Cam X5 from IROAD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.8%top 44.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability, which was classified as very critical, was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. This affects an unknown part. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IROAD | Dash Cam X5 | 20250308 |
| IROAD | Dash Cam X6 | 20250308 |
Weakness: CWE-285, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- VDB-299811 | IROAD Dash Cam X5/Dash Cam X6 improper authorization vdb-entry
- VDB-299811 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- Submit #516883 | IROAD Dashcam X series (X5, X6, etc) Improperly Preserved Integrity of Hardware Configuration State D third-party-advisory
- https://github.com/geo-chen/IROAD/blob/main/README.md#finding-5-managing-settings-to-obtain-sensitive-data-and-sabotaging-car-battery related