Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-30087 State: PUBLISHED Published: 2025-05-28T00:00:00.000Z Last Updated: 2025-11-03T19:46:45.392Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: bestpractical Products: RT Problem Types: CWE-79 Description: Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.bestpractical.com/release-notes/rt/index.html - https://docs.bestpractical.com/release-notes/rt/5.0.8 - https://docs.bestpractical.com/release-notes/rt/4.4.8
CVE ID: CVE-2025-30089 State: PUBLISHED Published: 2025-03-16T00:00:00.000Z Last Updated: 2025-03-17T15:41:26.096Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: boxdot Products: gurk Problem Types: CWE-150 Description: gurk (aka gurk-rs) through 0.6.3 mishandles ANSI escape sequences. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/boxdot/gurk-rs/issues/384 - https://crates.io/crates/gurk
CVE ID: CVE-2025-30090 State: PUBLISHED Published: 2025-04-02T00:00:00.000Z Last Updated: 2025-04-02T13:27:48.268Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: SquirrelMail Products: SquirrelMail Problem Types: CWE-79 Description: mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://squirrelmail.org - https://squirrelmail.org/security/issue.php?d=2025-04-02
CVE ID: CVE-2025-30091 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-03-25T14:35:59.575Z Vendors: Tiny Products: MoxieManager PHP Problem Types: CWE-96 Description: In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available after an installation has completed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxiemanager.com/documentation/SEC-1063.php - https://www.moxiemanager.com/changelog/
CVE ID: CVE-2025-30092 State: PUBLISHED Published: 2025-03-19T00:00:00.000Z Last Updated: 2025-03-24T13:32:57.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intrexx Portal Server 12.x <= 12.0.2 and 11.x <= 11.9.2 allows XSS in multiple Velocity scripts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.intrexx.com/en/security-advisories/ixsa-20250310-02/
CVE ID: CVE-2025-30093 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T15:19:37.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTCondor 23.0.x before 23.0.22, 23.10.x before 23.10.22, 24.0.x before 24.0.6, and 24.6.x before 24.6.1 allows authenticated attackers to bypass authorization restrictions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://htcondor.org/security/vulnerabilities/HTCONDOR-2025-0001.html
CVE ID: CVE-2025-30095 State: PUBLISHED Published: 2025-03-31T00:00:00.000Z Last Updated: 2025-04-21T18:55:28.219Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: VyOS Products: VyOS Problem Types: CWE-321 Description: VyOS 1.3 through 1.5 (fixed in 1.4.2) or any Debian-based system using dropbear in combination with live-build has the same Dropbear private host keys across different installations. Thus, an attacker can conduct active man-in-the-middle attacks against SSH connections if Dropbear is enabled as the SSH daemon. I n VyOS, this is not the default configuration for the system SSH daemon, but is for the console service. To mitigate this, one can ru
is not the default configuration for the system SSH daemon, but is for the console service. To mitigate this, one can run "rm -f /etc/dropbear/*key*" and/or "rm -f /etc/dropbear-initramfs/*key*" and then dropbearkey -t rsa -s 4096 -f /etc/dropbear_rsa_host_key and reload the service or reboot the system before using Dropbear as the SSH daemon (this clears out all keys mistakenly built into the release image) or update to the latest version of VyOS 1.4 or 1.5. Note that this vulnerability is not unique to VyOS and may appear in any Debian-based Linux distribution that uses Dropbear in combination with live-build, which has a safeguard against this behavior in OpenSSH but no equivalent one for
ropbear in combination with live-build, which has a safeguard against this behavior in OpenSSH but no equivalent one for Dropbear. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vyos/ - https://vyos.net/get/stream/#1.5-2025-Q1 - https://blog.vyos.io/vyos-stream-1.5-2025-q1 - https://vyos.dev/T7217 - https://blog.vyos.io/vyos-project-march-2025-update
CVE ID: CVE-2025-30096 State: PUBLISHED Published: 2025-08-04T14:32:53.745Z Last Updated: 2025-08-12T03:55:18.880Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Domain Feature Release, PowerProtect Data Domain LTS2024, PowerProtect Data Domain LTS 2023 Problem Types: CWE-78 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab
.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the DDSH CLI. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
CVE ID: CVE-2025-30097 State: PUBLISHED Published: 2025-08-04T14:38:04.039Z Last Updated: 2025-08-12T03:55:19.999Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Domain Feature Release, PowerProtect Data Domain LTS2024, PowerProtect Data Domain LTS 2023 Problem Types: CWE-78 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab
.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the DDSH CLI. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
CVE ID: CVE-2025-30098 State: PUBLISHED Published: 2025-08-04T14:42:36.430Z Last Updated: 2025-08-12T03:55:21.115Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Domain Feature Release, PowerProtect Data Domain LTS2024, PowerProtect Data Domain LTS 2023 Problem Types: CWE-78 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab
CVE ID: CVE-2025-30099 State: PUBLISHED Published: 2025-08-04T14:47:32.002Z Last Updated: 2025-08-12T03:55:22.230Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Domain Feature Release, PowerProtect Data Domain LTS2024, PowerProtect Data Domain LTS 2023 Problem Types: CWE-78 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabil
0.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the DDSH CLI. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
CVE ID: CVE-2025-30100 State: PUBLISHED Published: 2025-04-16T01:10:56.015Z Last Updated: 2025-04-18T03:55:46.950Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Alienware Command Center (AWCC) Problem Types: CWE-284 Description: Dell Alienware Command Center 6.x, versions prior to 6.7.37.0 contain an Improper Access Control Vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000305002/dsa-2025-168
CVE ID: CVE-2025-30101 State: PUBLISHED Published: 2025-05-08T17:44:41.280Z Last Updated: 2025-05-08T18:43:16.782Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-367 Description: Dell PowerScale OneFS, versions 9.8.0.0 through 9.10.1.0, contain a time-of-check time-of-use (TOCTOU) race condition vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to denial of service and information tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000317419/dsa-2025-192-security-update-for-dell-
DP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000317419/dsa-2025-192-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE ID: CVE-2025-30102 State: PUBLISHED Published: 2025-05-08T17:40:45.973Z Last Updated: 2025-05-08T18:55:21.567Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-787 Description: Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.1.0, contains an out-of-bounds write vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000317419/dsa-2025-192-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE ID: CVE-2025-30103 State: PUBLISHED Published: 2025-07-30T18:18:02.955Z Last Updated: 2025-07-30T18:29:44.849Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-552 Description: Dell SmartFabric OS10 Software, versions prior to 10.6.0.5 contains a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000346195/dsa-2025-259-security-update-for-dell-ne
Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000346195/dsa-2025-259-security-update-for-dell-networking-os10-vulnerabilities
CVE ID: CVE-2025-30105 State: PUBLISHED Published: 2025-07-30T17:50:38.998Z Last Updated: 2025-08-05T03:56:15.655Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: XtremIO Problem Types: CWE-532 Description: Dell XtremIO, version(s) 6.4.0-22, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
on with privileges of the compromised account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000337241/dsa-2025-108-security-update-for-dell-emc-xtremio-x2
CVE ID: CVE-2025-30106 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-21T16:30:03.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: On IROAD v9 devices, the dashcam has hardcoded default credentials ("qwertyuiop") that cannot be changed by the user. This allows an attacker within Wi-Fi range to connect to the device's network to perform sniffing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iroad-dashcam.nl/iroad/iroad-x5/ - https://github.com/geo-chen/IROAD-V
CVE ID: CVE-2025-30107 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-24T21:28:12.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery protection, potentially causing physical damage to the vehicle. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iroad-dashcam.nl/iroad/iroad-x5/%27 - https://github.com/geo-chen/IROAD-V
CVE ID: CVE-2025-30109 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-21T16:31:35.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and recorded footage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iroad-dashcam.nl/iroad/iroad-x5/ - https://github.com/geo-chen/IROAD-V
CVE ID: CVE-2025-30110 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-21T16:33:30.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: On IROAD X5 devices, a Bypass of Device Pairing can occur via MAC Address Spoofing. The dashcam's pairing mechanism relies solely on MAC address verification, allowing an attacker to bypass authentication by spoofing an already-paired MAC address that can be captured via an ARP scan. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iroad-dashcam.nl/iroad/iroad-x5/ - https://github.com/geo-chen/IROAD-V
CVE ID: CVE-2025-30111 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-24T21:59:03.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: On IROAD v9 devices, one can Remotely Dump Video Footage and the Live Video Stream. The dashcam exposes endpoints that allow unauthorized users, who gained access through other means, to list and download recorded videos, as well as access live video streams without proper authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iroad-dashcam.nl/iroad/iroad-x5/ - https://github.com/geo-chen/IROAD-V
CVE ID: CVE-2025-30112 State: PUBLISHED Published: 2025-03-24T00:00:00.000Z Last Updated: 2025-03-24T18:28:34.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: On 70mai Dash Cam 1S devices, by connecting directly to the dashcam's network and accessing the API on port 80 and RTSP on port 554, an attacker can bypass the device authorization mechanism from the official mobile app that requires a user to physically press on the power button during a connection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geo-chen/70mai/blob/main/README.md#finding-1---cve-2025-30112-bypass-device-pairing-of-70mai-dashcam-1s - https://www.70mai.com/cam1s/
CVE ID: CVE-2025-30113 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-21T13:53:45.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials exist in the APK for Ports 9091 and 9092. The dashcam's Android application contains hardcoded credentials that allow unauthorized access to device settings through ports 9091 and 9092. These credentials, stored in cleartext, can be exploited by an attacker who gains access to the dashcam's network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26 - https://github.com/geo-chen/Hella
CVE ID: CVE-2025-30114 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-21T17:58:05.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Bypassing of Device Pairing can occur. The pairing mechanism relies solely on the connecting device's MAC address. By obtaining the MAC address through network scanning and spoofing it, an attacker can bypass the authentication process and gain full access to the dashcam's features without proper authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4
Notes: - CISA ADP Vulnrichment: References: - https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26 - https://github.com/geo-chen/Hella
CVE ID: CVE-2025-30115 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-21T13:56:46.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Default Credentials Cannot Be Changed. It uses a fixed default SSID and password ("qwertyuiop"), which cannot be modified by users. The SSID is continuously broadcast, allowing unauthorized access to the device network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26 - https://github.com/geo-chen/Hella
CVE ID: CVE-2025-30116 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-25T18:13:44.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Remotely Dumping of Video Footage and the Live Video Stream can occur. It allows remote attackers to access and download recorded video footage from the SD card via port 9091. Additionally, attackers can connect to port 9092 to stream the live video feed by bypassing the challenge-response authentication mechanism. This exposes sensitive location and personal data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com
ensitive location and personal data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26 - https://github.com/geo-chen/Hella
CVE ID: CVE-2025-30117 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-25T18:19:25.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. After bypassing the device pairing, an attacker can obtain sensitive user and vehicle information through the settings interface. Remote attackers can modify power management settings, disable recording, delete stored footage, and turn off battery protection, leading to potential denial-of-service conditions and vehicle battery d
stored footage, and turn off battery protection, leading to potential denial-of-service conditions and vehicle battery drainage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/@geochen/cve-draft-hella-driving-recorder-dr-820-ff8c4e2cca26 - https://github.com/geo-chen/Hella
CVE ID: CVE-2025-30118 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-03-26T15:05:56.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the Audi Universal Traffic Recorder 2.88. It has Susceptibility to denial of service. It uses the same default credentials for all devices and does not implement proper multi-device authentication, allowing attackers to deny the owner access by occupying the only available connection. The SSID remains broadcast at all times, increasing exposure to potential attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geo-chen/Audi/blob/main/README.md#finding-1---
Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geo-chen/Audi/blob/main/README.md#finding-1---cve-2025-30118-audi-utr-susceptibility-to-dos
CVE ID: CVE-2025-30122 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-21T13:59:34.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on ROADCAM X3 devices. It has a uniform default credential set that cannot be modified by users, making it easy for attackers to gain unauthorized access to multiple devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://roadcam.my/pages/install-x3 - https://github.com/geo-chen/RoadCam
CVE ID: CVE-2025-30123 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-21T17:56:19.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on ROADCAM X3 devices. The mobile app APK (Viidure) contains hardcoded FTP credentials for the FTPX user account, enabling attackers to gain unauthorized access and extract sensitive recorded footage from the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://roadcam.my/pages/install-x3 - https://github.com/geo-chen/RoadCam
CVE ID: CVE-2025-30124 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-30T15:13:19.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. When a new SD card is inserted into the dashcam, the existing password is written onto the SD card in cleartext automatically. An attacker with temporary access to the dashcam can switch the SD card to steal this password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geo-chen/Marbella/ - https://makagps.com/ - https://geochen.medium.com/marbella-dashcam-ab40ca41adec - https://github.com/geo-chen/Marbella/blob/main/RE
agps.com/ - https://geochen.medium.com/marbella-dashcam-ab40ca41adec - https://github.com/geo-chen/Marbella/blob/main/README.md#finding-4---cve-2025-30124-passwords-are-stored-in-plaintext-and-can-be-retrieved-with-physical-contact