CVE-2025-30131

An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execute arbitrary commands by uploading a CGI-based webshell. Once a file is uploaded, the attacker can execute commands with root privileges, gaining full control over the dashcam...

CVE-2025-30131

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19623 2025-06-26 20:32:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjxubzkqi23...

CVE-2025-30131

An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execute arbitrary commands by uploading a CGI-based webshell. Once a file is uploaded, the attacker can execute commands with root privileges, gaining full control over the dashcam...

CVE-2025-30131

The IROAD Dashcam FX2 is vulnerable to an unauthenticated file upload vulnerability (CWE-434 ) in a specific endpoint. An attacker can exploit this by uploading a CGI-based webshell to execute arbitrary commands with root privileges , leading to complete device takeover. Furthermore, the vulnerab...