CVE-2025-2349CWE-326CWE-916

IROAD Dash Cam FX2 Password Hash passwd weak password hash

Low · published March 16, 2025

CVSS v4.0
2.3
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/passwd of the component Password Hash Handler. The manipulation leads to password hash with insufficient computational effort. Access to the local network is required for this attack. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00160 · 4.8th percentile
Weaknesses
CWE-326 · Inadequate Encryption Strength; CWE-916 · Use of Password Hash With Insufficient Computational Effort
Published
2025-03-16T21:31Z
EPSS history
Timeline
  • 16 MAR 21:31Z
    IROAD Dash Cam FX2 Password Hash passwd weak password hash
    cvelistv5