PT-2025-11604 · Iroad · Iroad V9

Published 2025-03-18 · Updated 2025-03-24 · CVE-2025-30107

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IROAD V9 (affected versions not specified)

Description A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery protection, potentially causing physical damage to the vehicle. This issue enables unauthorized parties to manage settings, obtain sensitive data, and sabotage the car battery.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-30107

Affected Products

Iroad V9

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-30107 · Security Note
• https://t.me/cvenotify/115995 · Telegram Post
• https://twitter.com/CVEnew/status/1902009883861700840 · Twitter Post
• https://t.me/cvetracker/19370 · Telegram Post
• https://github.com/geo-chen/IROAD-V · Note
• https://t.me/cvedetector/20587 · Telegram Post
• https://iroad-dashcam.nl/iroad/iroad-x5/%27 · Note