CVE-2025-30111

HIGH

IROAD v9 - Unauthenticated Video Footage and Live Stream Access

Title source: llm
STIX 2.1

Description

On IROAD v9 devices, one can Remotely Dump Video Footage and the Live Video Stream. The dashcam exposes endpoints that allow unauthorized users, who gained access through other means, to list and download recorded videos, as well as access live video streams without proper authentication.

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0038
EPSS Percentile 29.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-306
Status published
Published Mar 18, 2025
Tracked Since Feb 18, 2026