Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-6667

Malicious code in bioql PyPI...

6.9CVSS5.6AI score0.00161EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-7236

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00016EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/03/20 4:9 p.m.5 views

CVE-2025-30110

On IROAD X5 devices, a Bypass of Device Pairing can occur via MAC Address Spoofing. The dashcam's pairing mechanism relies solely on MAC address verification, allowing an attacker to bypass authentication by spoofing an already-paired MAC address that can be captured via an ARP scan...

6.5CVSS7.4AI score0.00016EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/18 4:25 p.m.17 views

CVE-2025-2342

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.9CVSS7AI score0.00161EPSS
Exploits0References1
NVD
NVD
added 2025/03/18 3:16 p.m.5 views

CVE-2025-30110

On IROAD X5 devices, a Bypass of Device Pairing can occur via MAC Address Spoofing. The dashcam's pairing mechanism relies solely on MAC address verification, allowing an attacker to bypass authentication by spoofing an already-paired MAC address that can be captured via an ARP scan...

6.5CVSS0.00016EPSS
Exploits0References2
CVE
CVE
added 2025/03/18 12:0 a.m.31 views

CVE-2025-30110

CVE-2025-30110 affects IROAD X5 dashcams. The issue is a bypass of the device pairing mechanism caused by relying solely on MAC address verification. An attacker can bypass authentication by spoofing an already‑paired MAC address that can be captured via an ARP scan. The vulnerability is document...

6.5CVSS6.7AI score0.00016EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/03/18 12:0 a.m.17 views

CVE-2025-30110

On IROAD X5 devices, a Bypass of Device Pairing can occur via MAC Address Spoofing. The dashcam's pairing mechanism relies solely on MAC address verification, allowing an attacker to bypass authentication by spoofing an already-paired MAC address that can be captured via an ARP scan...

0.00016EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/18 12:0 a.m.3 views

IROAD X5 安全漏洞

IROAD X5 is a car recorder from IROAD. A security vulnerability exists in IROAD X5, which stems from the device pairing mechanism relying only on MAC address authentication, which allows an attacker to bypass authentication through MAC address spoofing...

6.5CVSS6.9AI score0.00016EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/03/18 12:0 a.m.4 views

CVE-2025-30110

On IROAD X5 devices, a Bypass of Device Pairing can occur via MAC Address Spoofing. The dashcam's pairing mechanism relies solely on MAC address verification, allowing an attacker to bypass authentication by spoofing an already-paired MAC address that can be captured via an ARP scan...

6.6AI score0.00016EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/03/16 4:0 p.m.15 views

CVE-2025-2342 IROAD X5 Mobile App API Endpoint hard-coded credentials

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.9CVSS0.00161EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/16 4:0 p.m.11 views

CVE-2025-2342 IROAD X5 Mobile App API Endpoint hard-coded credentials

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.9CVSS5.4AI score0.00161EPSS
Exploits0References4
CVE
CVE
added 2025/03/16 4:0 p.m.94 views

CVE-2025-2342

CVE-2025-2342 affects the IROAD X5 Mobile App (Android) up to version 5.2.5. The vulnerability targets an unknown function within the API Endpoint component, where manipulation results in hard-coded credentials. This enables a remote attack without user interaction. The incident is publicly discl...

6.9CVSS6.8AI score0.00161EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/03/16 12:0 a.m.2 views

IROAD X5 安全漏洞

IROAD X5 is a car recorder from IROAD. A security vulnerability exists in IROAD X5 version 5.2.5 and prior versions, which stems from hard-coded credentials and could lead to a remote attack...

6.9CVSS5.5AI score0.00161EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/03/16 12:0 a.m.2 views

IROAD X5 安全漏洞

IROAD X5 is a car recorder from IROAD. A security vulnerability exists in IROAD X5 that stems from improper authorization and could lead to a remote attack...

10CVSS9.4AI score0.00121EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/03/16 12:0 a.m.1 views

IROAD X5 访问控制错误漏洞

IROAD X5 is a car recorder from IROAD. IROAD X5 suffers from an Access Control Error vulnerability that stems from an authentication error and could lead to a remote attack...

6.3CVSS5.9AI score0.00073EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/03/16 12:0 a.m.1 views

IROAD X5 安全漏洞

IROAD X5 is a car recorder from IROAD. A security vulnerability exists in IROAD X5 20250203 and prior versions, which stems from the use of default credentials and requires an attack to be launched on the local network...

3.1CVSS4.1AI score0.00082EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/03/16 12:0 a.m.2 views

IROAD X5 安全漏洞

IROAD X5 is a car recorder from IROAD. A security vulnerability exists in IROAD X5 that stems from hard-coded credentials that require an attack to be launched on the local network...

7.7CVSS7.4AI score0.00062EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/03/16 12:0 a.m.2 views

IROAD X5 访问控制错误漏洞

IROAD X5 is a car recorder from IROAD. IROAD X5 suffers from an access control error vulnerability that stems from a lack of authentication and could lead to a remote attack...

6.9CVSS5.7AI score0.00188EPSS
Exploits0References6
Rows per page
Query Builder