CVE-2025-2341
IROAD Dash Cam X5 SSID default credentials
- State
- Published
- Severity
- 2.3 Low
- Published
- Mar 16, 2025
- Updated
- Mar 17, 2025
- Reserved
- Mar 15, 2025
Description
A vulnerability was found in IROAD Dash Cam X5 up to 20250203. It has been rated as problematic. This issue affects some unknown processing of the component SSID. The manipulation leads to use of default credentials. The attack needs to be initiated within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 2.3 Low | CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 3.1 Low | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | VulDB |
| 3.0 | 3.1 Low | CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | VulDB |
| 2.0 | 1.8 Low | AV:A/AC:H/Au:N/C:P/I:N/A:N | VulDB |
Weaknesses
- CWE-1392 Use of Default Credentials
Affected Products
| Product | Versions |
|---|---|
Dash Cam X5IROAD |
|
References
- VDB-299807 | IROAD Dash Cam X5 SSID default credentialsvdb-entry
- VDB-299807 | CTI Indicators (IOB, IOC)signaturepermissions-required
- Submit #512418 | IROAD Dashcam X series Use of Default Credentialsthird-party-advisory
- https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-1-default-credentials-for-ssid-cwe-1393exploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.