CVE-2025-30110

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Mar 18, 2025
Updated: Mar 21, 2025
CWE ID 290

Summary

CVE-2025-30110 is a vulnerability affecting IROAD X5 devices. The issue lies in the device pairing mechanism, which solely relies on MAC address verification. An attacker can exploit this weakness by spoofing a MAC address that has already been paired, allowing them to bypass the authentication process. This vulnerability can be exploited through an ARP scan, enabling unauthorized access to the affected device. The consequences of this breach could include potential data theft or even unauthorized recording of video footage. Users are advised to update their devices as soon as a patch becomes available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share