CVE-2025-2350

medium

Description

A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been rated as critical. Affected by this issue is some unknown functionality of the file /action/upload_file. The manipulation leads to unrestricted upload. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used.

References

https://vuldb.com/?id.299816

https://vuldb.com/?ctiid.299816

https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-11-unrestricted-webshell

https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-10-unauthenticated-uploads

Details

Source: Mitre, NVD

Published: 2025-03-16

Updated: 2025-03-16

Risk Information

CVSS v2

Base Score: 5.8

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 6.3

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Severity: Medium

CVSS v4

Base Score: 5.3

Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Severity: Medium