https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-30133.htmlhttps://patchthecve.com/cve/CVE-2025-30133.htmlWed, 17 Jun 2026 09:08:13 +0000CRITICAL 9.8: An issue was discovered on IROAD Dashcam FX2 devices. Bypass of Device Pairing/Registration can occur. It requires device registration via the "IROAD X View" app for authentication, but its HTTP server lacks this restriction. Once connected to the dashcam's Wi-Fi network via the default password ("qhttps://patchthecve.com/cve/CVE-2025-30135.htmlhttps://patchthecve.com/cve/CVE-2025-30135.htmlWed, 17 Jun 2026 09:08:13 +0000CRITICAL 9.4: An issue was discovered on IROAD Dashcam FX2 devices. Dumping Files Over HTTP and RTSP Without Authentication can occur. It lacks authentication controls on its HTTP and RTSP interfaces, allowing attackers to retrieve sensitive files and video recordings. By connecting to http://192.168.10.1/mnt/exthttps://patchthecve.com/cve/CVE-2025-30131.htmlhttps://patchthecve.com/cve/CVE-2025-30131.htmlWed, 17 Jun 2026 09:08:12 +0000CRITICAL 9.8: An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execute arbitrary commands by uploading a CGI-based webshell. Once a file is uploaded, the attacker can execute commands with root privileges, gaining full control over the dashcam. Addihttps://patchthecve.com/cve/CVE-2025-2350.htmlhttps://patchthecve.com/cve/CVE-2025-2350.htmlWed, 17 Jun 2026 09:06:48 +0000MEDIUM 6.3: A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been rated as critical. Affected by this issue is some unknown functionality of the file /action/upload_file. The manipulation leads to unrestricted upload. Access to the local network is required for this attack to succeed. The https://patchthecve.com/cve/CVE-2025-2349.htmlhttps://patchthecve.com/cve/CVE-2025-2349.htmlWed, 17 Jun 2026 09:06:48 +0000LOW 3.1: A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/passwd of the component Password Hash Handler. The manipulation leads to password hash with insufficient computational effohttps://patchthecve.com/cve/CVE-2025-2348.htmlhttps://patchthecve.com/cve/CVE-2025-2348.htmlWed, 17 Jun 2026 09:06:48 +0000MEDIUM 4.3: A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been classified as problematic. Affected is an unknown function of the file /mnt/extsd/event/ of the component HTTP/RTSP. The manipulation leads to information disclosure. The attack needs to be initiated within the local networkhttps://patchthecve.com/cve/CVE-2025-2347.htmlhttps://patchthecve.com/cve/CVE-2025-2347.htmlWed, 17 Jun 2026 09:06:48 +0000MEDIUM 6.3: A vulnerability was found in IROAD Dash Cam FX2 up to 20250308 and classified as problematic. This issue affects some unknown processing of the component Device Registration. The manipulation of the argument Password with the input qwertyuiop leads to use of default password. The attack needs to be