Approved changes feed: RSS · Atom

cpe:2.3:a:iroad:dash_cam_fx2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIroad (1613842a-41d3-531c-a539-e6e26e32d2b2)
ProductDash Cam Fx2 (a2867c7d-c3bb-5637-a5c0-f6b806dd81f6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2350 vulnerable 2026-06-08 07:16:56.845527 IROAD Dash Cam FX2 upload_file unrestricted upload
MEDIUM (6.3)
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been rated as critical. Affected by this issue is some unknown functionality of the file /action/upload_file. The manipulation leads to unrestricted upload. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used.
Published: 2025-03-16T22:00:19.587Z
Updated: 2025-03-17T16:29:49.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2349 vulnerable 2026-06-08 07:16:56.844987 IROAD Dash Cam FX2 Password Hash passwd weak password hash
LOW (3.1)
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/passwd of the component Password Hash Handler. The manipulation leads to password hash with insufficient computational effort. Access to the local network is required for this attack. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
Published: 2025-03-16T21:31:04.302Z
Updated: 2025-03-17T16:45:26.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2348 vulnerable 2026-06-08 07:16:56.844256 IROAD Dash Cam FX2 HTTP/RTSP event information disclosure
MEDIUM (4.3)
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been classified as problematic. Affected is an unknown function of the file /mnt/extsd/event/ of the component HTTP/RTSP. The manipulation leads to information disclosure. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used.
Published: 2025-03-16T21:00:07.043Z
Updated: 2025-03-17T16:47:05.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2347 vulnerable 2026-06-08 07:16:56.839570 IROAD Dash Cam FX2 Device Registration default password
MEDIUM (6.3)
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308 and classified as problematic. This issue affects some unknown processing of the component Device Registration. The manipulation of the argument Password with the input qwertyuiop leads to use of default password. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used.
Published: 2025-03-16T20:31:04.413Z
Updated: 2025-03-17T13:45:11.469Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.