CVE-2025-30123

critical · 9.8

An issue was discovered on ROADCAM X3 devices. The mobile app APK (Viidure) contains hardcoded FTP credentials for the FTPX user account, enabling attackers to gain unauthorized access and extract sensitive recorded footage from the device.

9.8

CVSS

0.4%

EPSS (exploit prob.)

38th

EPSS percentile

2025-03-18

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-798

References

https://github.com/geo-chen/RoadCam
https://roadcam.my/pages/install-x3

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-30123