Iroadau vulnerabilities
We track 5 vulnerabilities in Iroadau products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 28, 2025.
Latest Iroadau vulnerabilities
- 9.8 Critical severity
Fx2 Firmware: Improper Access Control
An issue was discovered on IROAD Dashcam FX2 devices. Bypass of Device Pairing/Registration can occur. It requires device registration via the "IROAD X View" app for authentication, but its HTTP server lacks this restriction. Once connected to the dashcam's Wi
- 9.4 Critical severity
Fx2 Firmware: Missing Authentication for Critical Functionality
An issue was discovered on IROAD Dashcam FX2 devices. Dumping Files Over HTTP and RTSP Without Authentication can occur. It lacks authentication controls on its HTTP and RTSP interfaces, allowing attackers to retrieve sensitive files and video recordings. By c
- 9.8 Critical severity
Fx2 Firmware: Unrestricted Upload of File with Dangerous Type
An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execute arbitrary commands by uploading a CGI-based webshell. Once a file is uploaded, the attacker can execute commands with root privileges, gai
- 7.8 High severity
Dash Cam FX2: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been rated as critical. Affected by this issue is some unknown functionality of the file /action/upload_file. The manipulation leads to unrestricted upload. Access to the local network is r
- 7.8 High severity
Dash Cam FX2: Use of Default Password
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308 and classified as problematic. This issue affects some unknown processing of the component Device Registration. The manipulation of the argument Password with the input qwertyuiop leads to use of d