CVE-2025-2345

critical · 9.3

A vulnerability, which was classified as very critical, was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. This affects an unknown part. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

9.3

CVSS

0.7%

EPSS (exploit prob.)

53rd

EPSS percentile

2025-03-16

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-266CWE-285

References

https://github.com/geo-chen/IROAD/blob/main/README.md#finding-5-managing-settings-to-obtain-sensitive-data-and-sabotaging-car-battery
https://vuldb.com/?ctiid.299811
https://vuldb.com/?id.299811
https://vuldb.com/?submit.516883

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-2345