EUVD-2025-6666

Malicious code in bioql PyPI...

CVE-2025-2341

A vulnerability was found in IROAD Dash Cam X5 up to 20250203. It has been rated as problematic. This issue affects some unknown processing of the component SSID. The manipulation leads to use of default credentials. The attack needs to be initiated within the local network. The complexity of an...

CVE-2025-2346

A vulnerability has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 and classified as problematic. This vulnerability affects unknown code of the component Domain Handler. The manipulation of the argument Domain Name leads to origin validation error. The attack can be initiated...

CVE-2025-2341 IROAD Dash Cam X5 SSID default credentials

A vulnerability was found in IROAD Dash Cam X5 up to 20250203. It has been rated as problematic. This issue affects some unknown processing of the component SSID. The manipulation leads to use of default credentials. The attack needs to be initiated within the local network. The complexity of an...

CVE-2025-2341 IROAD Dash Cam X5 SSID default credentials

A vulnerability was found in IROAD Dash Cam X5 up to 20250203. It has been rated as problematic. This issue affects some unknown processing of the component SSID. The manipulation leads to use of default credentials. The attack needs to be initiated within the local network. The complexity of an...

CVE-2025-2341: Use of Default Credentials

A vulnerability was found in IROAD Dash Cam X5 up to 20250203. It has been rated as problematic. This issue affects some unknown processing of the component SSID. The manipulation leads to use of default credentials. The attack needs to be initiated within the local network. The complexity of an...

CVE-2025-2345: Improper Authorization

A vulnerability, which was classified as very critical, was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. This affects an unknown part. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosu...

CVE-2025-2343: Use of Hard-coded Credentials

A vulnerability classified as critical was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. Affected by this vulnerability is an unknown functionality of the component Device Pairing. The manipulation leads to hard-coded credentials. Access to the local network is required for this atta...

PT-2025-11398

Name of the Vulnerable Software and Affected Versions: IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 Description: A critical issue has been found in the affected devices, related to some unknown functionality of the component API Endpoint, leading to missing authentication. The attack may be...

PT-2025-11401

Name of the Vulnerable Software and Affected Versions: IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 Description: A vulnerability has been found in the Domain Handler component, where the manipulation of the Domain Name argument leads to an origin validation error. The attack can be initiated...

PT-2025-11397

Name of the Vulnerable Software and Affected Versions: IROAD Dash Cam X5 versions up to 20250308 IROAD Dash Cam X6 versions up to 20250308 Description: A critical vulnerability was found in the Device Pairing component of the affected devices, leading to hard-coded credentials. Access to the loca...

PT-2025-11393

Name of the Vulnerable Software and Affected Versions: IROAD Dash Cam X5 up to 20250203 Description: A problem was found in the processing of the component SSID, which can lead to the use of default credentials. The attack must be initiated within the local network and has a high complexity, maki...

CVE-2025-2346: Origin Validation Error

A vulnerability has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 and classified as problematic. This vulnerability affects unknown code of the component Domain Handler. The manipulation of the argument Domain Name leads to origin validation error. The attack can be initiated...

CVE-2025-2344: Missing Authentication for Critical Function

A vulnerability, which was classified as critical, has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. Affected by this issue is some unknown functionality of the component API Endpoint. The manipulation leads to missing authentication. The attack may be launched remotely. The...

PT-2025-11372

Name of the Vulnerable Software and Affected Versions IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 Description A very critical vulnerability was found in IROAD Dash Cam X5 and Dash Cam X6, affecting an unknown part. The manipulation leads to improper authorization, and it is possible to...