CVE-2025-2341: IROAD Dash Cam X5 SSID default credentials

Severity: low (CVSS 3.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-03-16 · updated 2026-06-17
Weakness: CWE-1392

Description

A vulnerability was found in IROAD Dash Cam X5 up to 20250203. It has been rated as problematic. This issue affects some unknown processing of the component SSID. The manipulation leads to use of default credentials. The attack needs to be initiated within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

IROAD Dash Cam X5: 20250203

References

https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-1-default-credentials-for-ssid-cwe-1393
https://vuldb.com/?ctiid.299807
https://vuldb.com/?id.299807
https://vuldb.com/?submit.512418

Get alerted when CVE-2025-2341 or the next vulnerability affects your stack