CVE-2025-2350

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Mar 16, 2025
CWE ID 79

Summary

CVE-2025-2350: A critical vulnerability was discovered in IROAD Dash Cam FX2 models up to version 20250308. The issue lies within an unknown functionality of the /action/upload_file path. Successful exploitation allows for unrestricted file uploads. Attackers must have access to the local network to execute this vulnerability, which has been publicly disclosed, potentially putting affected users at risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share