CVE-2025-30133

An issue was discovered on IROAD Dashcam FX2 devices. Bypass of Device Pairing/Registration can occur. It requires device registration via the "IROAD X View" app for authentication, but its HTTP server lacks this restriction. Once connected to the dashcam's Wi-Fi network via the default password...

CVE-2025-30133

Vulnerability: IROAD Dashcam FX2 exposes an unauthenticated HTTP interface (http://192.168.10.1) after connecting to the dashcam’s Wi‑Fi using the default password, bypassing the device pairing/registration process. Root cause: the HTTP server does not enforce pairing restrictions, allowing direc...

CVE-2025-30133

An issue was discovered on IROAD Dashcam FX2 devices. Bypass of Device Pairing/Registration can occur. It requires device registration via the "IROAD X View" app for authentication, but its HTTP server lacks this restriction. Once connected to the dashcam's Wi-Fi network via the default password...