Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q753-2hq6-5vff

Опубликовано: 16 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.7
CVSS3: 7.5

Описание

A vulnerability classified as critical was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. Affected by this vulnerability is an unknown functionality of the component Device Pairing. The manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. Affected by this vulnerability is an unknown functionality of the component Device Pairing. The manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 17%
0.00053
Низкий

7.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-259

Связанные уязвимости

CVSS3: 7.5
nvd
11 месяцев назад

A vulnerability classified as critical was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. Affected by this vulnerability is an unknown functionality of the component Device Pairing. The manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 17%
0.00053
Низкий

7.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-259