CVE-2025-30123

CRITICAL

9.8

Description

An issue was discovered on ROADCAM X3 devices. The mobile app APK (Viidure) contains hardcoded FTP credentials for the FTPX user account, enabling attackers to gain unauthorized access and extract sensitive recorded footage from the device.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie3/18/2025

Derniere modification3/21/2025

Sourcenvd

Observations honeypot0

Faiblesses (CWE)

CWE-798

References

https://github.com/geo-chen/RoadCam(cve@mitre.org)

https://roadcam.my/pages/install-x3(cve@mitre.org)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.