CVE-2025-30135

An issue was discovered on IROAD Dashcam FX2 devices

Critical · published July 25, 2025

CVSS v3.1
9.4
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

🚨 A simple connection to an unsecured RTSP stream is all it takes to access sensitive video recordings from IROAD Dashcam FX2 devices! 🔥 Think of it like leaving your front door wide open while streaming a live feed of your living room — anyone passing by could just walk in and view everything, with no one the wiser! An attacker could not only download all stored video recordings but also watch live footage from the dashcam. This means sensitive moments captured by the dashcam could be exposed, leading to privacy violations and potential misuse of the information. Absolutely devastating!

Put simply

Think of it like leaving your front door wide open while streaming a live feed of your living room — anyone passing by could just walk in and view everything, with no one the wiser! This vulnerability allows unauthorized access to files and live video streams over HTTP and RTSP protocols due to a lack of authentication controls. Attackers can easily retrieve sensitive visual data from the device without any barriers.

What to do

An attacker could not only download all stored video recordings but also watch live footage from the dashcam. This means sensitive moments captured by the dashcam could be exposed, leading to privacy violations and potential misuse of the information. Absolutely devastating! Immediately update the IROAD Dashcam FX2 firmware to the latest version to implement necessary authentication controls. Additionally, restrict access to the HTTP and RTSP interfaces to trusted IP addresses only, and monitor network traffic for any unauthorized access attempts. 🛡️ You've got this! Follow these steps and you’ll secure your devices in no time! 🌟

The record
Technical detail
CVSS v3.1
9.4 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00588 · 47.4th percentile
Published
2025-07-25T00:00Z
EPSS history
Timeline
  • 25 JUL 00:00Z
    An issue was discovered on IROAD Dashcam FX2 devices
    cvelistv5