CVE-2025-30111

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

On IROAD v9 devices, one can Remotely Dump Video Footage and the Live Video Stream. The dashcam exposes endpoints that allow unauthorized users, who gained access through other means, to list and download recorded videos, as well as access live video streams without proper authentication.

Published 2025-03-18. Last modified 2026-06-17.