← Volver a CVEs
CVE-2025-2345
CRITICAL9.8
Descripcion
A vulnerability, which was classified as very critical, was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. This affects an unknown part. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Detalles CVE
Puntuacion CVSS v3.19.8
SeveridadCRITICAL
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado3/16/2025
Ultima modificacion3/16/2025
Fuentenvd
Avistamientos honeypot0
Debilidades (CWE)
CWE-266CWE-285
Referencias
https://github.com/geo-chen/IROAD/blob/main/README.md#finding-5-managing-settings-to-obtain-sensitive-data-and-sabotaging-car-battery(cna@vuldb.com)
https://vuldb.com/?ctiid.299811(cna@vuldb.com)
https://vuldb.com/?id.299811(cna@vuldb.com)
https://vuldb.com/?submit.516883(cna@vuldb.com)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.