IROAD FX2 访问控制错误漏洞

IROAD FX2 is a car recorder from IROAD. An access control error vulnerability exists in IROAD FX2 20250308 and prior versions, which stems from an information disclosure that requires an attack to be launched on the local network...

IROAD FX2 代码问题漏洞

IROAD FX2 is a car recorder from IROAD. A code issue vulnerability exists in IROAD FX2 20250308 and prior versions, which stems from an unrestricted upload and requires an attack to be launched on the local network...

PT-2025-11404

Name of the Vulnerable Software and Affected Versions: IROAD Dash Cam FX2 up to 20250308 Description: A vulnerability was found in the Password Hash Handler component, affecting an unknown functionality of the file /etc/passwd. The manipulation leads to password hash with insufficient computation...

PT-2025-11393

Name of the Vulnerable Software and Affected Versions: IROAD Dash Cam X5 up to 20250203 Description: A problem was found in the processing of the component SSID, which can lead to the use of default credentials. The attack must be initiated within the local network and has a high complexity, maki...

CVE-2025-2347: Use of Default Password

A vulnerability was found in IROAD Dash Cam FX2 up to 20250308 and classified as problematic. This issue affects some unknown processing of the component Device Registration. The manipulation of the argument Password with the input qwertyuiop leads to use of default password. The attack needs to ...

IROAD FX2 安全漏洞

IROAD FX2 is a car recorder from IROAD. A security vulnerability exists in IROAD FX2 20250308 and prior versions that stems from the use of a default password that requires an attack to be initiated on the local network...

PT-2025-11402

Name of the Vulnerable Software and Affected Versions: IROAD Dash Cam FX2 up to 20250308 Description: A vulnerability was found in the Device Registration component of the affected software. The issue allows for the use of a default password when the Password argument is manipulated with a specif...

IROAD X5 安全漏洞

IROAD X5 is a car recorder from IROAD. A security vulnerability exists in IROAD X5 20250203 and prior versions, which stems from the use of default credentials and requires an attack to be launched on the local network...

PT-2025-11405

Name of the Vulnerable Software and Affected Versions: IROAD Dash Cam FX2 up to 20250308 Description: A critical issue affects some unknown functionality of the file /action/upload file, leading to unrestricted upload. Access to the local network is required for this attack to succeed. The...

PT-2025-11403

Name of the Vulnerable Software and Affected Versions: IROAD Dash Cam FX2 up to 20250308 Description: A vulnerability was found in the HTTP/RTSP component of the IROAD Dash Cam FX2, affecting an unknown function of the file /mnt/extsd/event/. This issue leads to information disclosure and can be...

CVE-2025-2350: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been rated as critical. Affected by this issue is some unknown functionality of the file /action/uploadfile. The manipulation leads to unrestricted upload. Access to the local network is required for this attack to succeed. Th...

CVE-2025-2348: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been classified as problematic. Affected is an unknown function of the file /mnt/extsd/event/ of the component HTTP/RTSP. The manipulation leads to information disclosure. The attack needs to be initiated within the local...

CVE-2025-2343: Use of Hard-coded Credentials

A vulnerability classified as critical was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. Affected by this vulnerability is an unknown functionality of the component Device Pairing. The manipulation leads to hard-coded credentials. Access to the local network is required for this atta...

CVE-2025-2341: Use of Default Credentials

A vulnerability was found in IROAD Dash Cam X5 up to 20250203. It has been rated as problematic. This issue affects some unknown processing of the component SSID. The manipulation leads to use of default credentials. The attack needs to be initiated within the local network. The complexity of an...

CVE-2025-2349: Use of Password Hash With Insufficient Computational Effort

A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/passwd of the component Password Hash Handler. The manipulation leads to password hash with insufficient computational...

PT-2025-11397

Name of the Vulnerable Software and Affected Versions: IROAD Dash Cam X5 versions up to 20250308 IROAD Dash Cam X6 versions up to 20250308 Description: A critical vulnerability was found in the Device Pairing component of the affected devices, leading to hard-coded credentials. Access to the loca...

CVE-2025-2122

A vulnerability classified as problematic was found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected by this vulnerability is an unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack can only be initiated within the local...

CVE-2025-2121

A vulnerability classified as critical has been found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected is an unknown function of the component File Storage. The manipulation leads to improper access controls. The attack can only be done within the local network. The exploit has been...

CVE-2025-27615

umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit...

CVE-2025-27615 umatiGateway's UI publicly accessible in provided docker-compose file

umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit...