PT-2025-11606 · Iroad X5 · Iroad X5

Published 2025-03-18 · Updated 2025-03-18 · CVE-2025-30110

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IROAD X5 devices (affected versions not specified)

Description A Bypass of Device Pairing can occur via MAC Address Spoofing on the affected devices. The pairing mechanism relies solely on MAC address verification, allowing an attacker to bypass authentication by spoofing an already-paired MAC address that can be captured via an ARP scan.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2025-30110

Affected Products

Iroad X5

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-30110 · Security Note
• https://t.me/cvedetector/20578 · Telegram Post
• https://iroad-dashcam.nl/iroad/iroad-x5 · Note
• https://twitter.com/CVEnew/status/1902005983762874474 · Twitter Post
• https://github.com/geo-chen/IROAD-V · Note
• https://t.me/cvetracker/19372 · Telegram Post