CVE-2025-30111

On IROAD v9 devices, one can Remotely Dump Video Footage and the Live Video Stream

High · published March 18, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
35.7
In the wild
Unconfirmed
What it is

On IROAD v9 devices, one can Remotely Dump Video Footage and the Live Video Stream. The dashcam exposes endpoints that allow unauthorized users, who gained access through other means, to list and download recorded videos, as well as access live video streams without proper authentication.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00425 · 35.7th percentile
Published
2025-03-18T00:00Z
EPSS history
Timeline
  • 18 MAR 00:00Z
    On IROAD v9 devices, one can Remotely Dump Video Footage and the Live Video Stream
    cvelistv5