CVE-2025-30110
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2025-30110 is a vulnerability affecting IROAD X5 devices. The issue lies in the device pairing mechanism, which solely relies on MAC address verification. An attacker can exploit this weakness by spoofing a MAC address that has already been paired, allowing them to bypass the authentication process. This vulnerability can be exploited through an ARP scan, enabling unauthorized access to the affected device. The consequences of this breach could include potential data theft or even unauthorized recording of video footage. Users are advised to update their devices as soon as a patch becomes available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- IROAD Dash Cam X5