Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

CVE-2025-30107: IROAD V9 dashcams: Unauthorized access to settings and battery control

CVE-2025-30107 · published 1 year ago
Summary

Unauthorized users can access and modify settings on IROAD V9 dashcams, potentially causing damage to the vehicle's battery by disabling its protection. This is a concern for IROAD V9 users, as it could lead to battery drainage or even physical harm to the vehicle. Users should update their dashcams to the latest firmware to address this issue.

Original advisory text
On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. A vulnerability in the dashcam's configuration managemen...
On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery protection, potentially causing physical damage to the vehicle.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published18 Mar 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
Track software like this
Free during beta