CVE-2025-30122

An issue was discovered on ROADCAM X3 devices

Critical · published March 18, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
37.9
In the wild
Unconfirmed
What it is

🔥 One default password is all it takes to open the floodgates! ROADCAM X3 devices are stuck with unchangeable credentials that anyone can exploit. 🚨 Think of it like a hotel where every room has the same key that everyone can snag—no need for a master key when you can just walk in with that universal one! An attacker could gain unauthorized access to any ROADCAM X3 device, opening the door to spying on your footage, tampering with settings, or worse—total control of the device. This is not just a minor inconvenience; it's an absolute disaster waiting to happen. If this vulnerability is exploited, it could result in severe breaches of privacy and security.

Put simply

Think of it like a hotel where every room has the same key that everyone can snag—no need for a master key when you can just walk in with that universal one! This vulnerability arises because ROADCAM X3 devices are shipped with a uniform set of default credentials that users cannot modify. This makes it trivially easy for attackers to access devices without any authentication hurdle.

What to do

An attacker could gain unauthorized access to any ROADCAM X3 device, opening the door to spying on your footage, tampering with settings, or worse—total control of the device. This is not just a minor inconvenience; it's an absolute disaster waiting to happen. If this vulnerability is exploited, it could result in severe breaches of privacy and security. Immediate action is required: change the default credentials to unique, strong passwords as soon as possible. If you’re managing these devices, ensure you check for any configurations or updates that might address this vulnerability. Keep an eye on vendor announcements for further guidance. You've got this! Implement these steps, and you'll bolster your security like a pro! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00448 · 37.9th percentile
Published
2025-03-18T00:00Z
EPSS history
Timeline
  • 18 MAR 00:00Z
    An issue was discovered on ROADCAM X3 devices
    cvelistv5