CVE-2025-2346: IROAD Dash Cam X5/Dash Cam X6 Domain origin validation

Severity: medium (CVSS 5.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-03-16 · updated 2026-06-17
Weakness: CWE-345

Description

A vulnerability has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 and classified as problematic. This vulnerability affects unknown code of the component Domain Handler. The manipulation of the argument Domain Name leads to origin validation error. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.

Affected products

IROAD Dash Cam X5: 20250308
IROAD Dash Cam X6: 20250308

References

https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-6-public-domain-used-for-internal-domain-name
https://vuldb.com/?ctiid.299812
https://vuldb.com/?id.299812

Get alerted when CVE-2025-2346 or the next vulnerability affects your stack