CVE-2025-30131

An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execute arbitrary commands by uploading a CGI-based webshell. Once a file is uploaded, the attacker can execute commands with root privileges, gaining full control over the dashcam...

CVE-2025-30131

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19623 2025-06-26 20:32:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjxubzkqi23...

CVE-2025-30131

The CVE-2025-30131 entry concerns IROAD Dashcam FX2 devices with an unauthenticated file-upload endpoint that can be exploited to run commands via a CGI-based webshell. The underlying issue allows an attacker to execute commands with root privileges and gain full control of the device. In additio...

CVE-2025-30131

An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execute arbitrary commands by uploading a CGI-based webshell. Once a file is uploaded, the attacker can execute commands with root privileges, gaining full control over the dashcam...