PT-2025-11393 · Iroad · Iroad Dash Cam X5

Geochen · Published 2025-03-16 · Updated 2025-03-16 · CVE-2025-2341

Positive Technologies (AI Summary)

CVSS v2.0

1.8

Low

Base vector

AV:A/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: IROAD Dash Cam X5 up to 20250203

Description: A problem was found in the processing of the component SSID, which can lead to the use of default credentials. The attack must be initiated within the local network and has a high complexity, making exploitation difficult. The issue affects some unknown processing of the SSID component.

Recommendations: For IROAD Dash Cam X5 up to 20250203, consider changing the default credentials to custom ones to prevent potential exploitation, and ensure that the device is not accessible from the local network to unauthorized parties. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-1392

Related Identifiers

CVE-2025-2341

Affected Products

Iroad Dash Cam X5

References · 8

• 🔥 https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-1-default-credentials-for-ssid-cwe-1393 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-2341 · Security Note
• https://t.me/cvetracker/19229 · Telegram Post
• https://vuldb.com/?submit.512418 · Note
• https://t.me/cvedetector/20413 · Telegram Post
• https://twitter.com/CVEnew/status/1901284891570167849 · Twitter Post
• https://vuldb.com/?ctiid.299807 · Note
• https://vuldb.com/?id.299807 · Note