IROAD Dash Cam X5 Default Credentials Vulnerability

A vulnerability exists in the IROAD Dash Cam X5 in versions prior to 20250203, allowing local attackers to exploit default credentials associated with the camera's SSID. This vulnerability arises from the camera broadcasting a fixed SSID with unchangeable default credentials, enabling unauthorized access to the device's network. The issue's complexity is high, making exploitation difficult, but the vulnerability has been publicly disclosed and could be exploited.

Impact

Exploitation of this vulnerability allows unauthorized users to connect to the dash cam's network using default credentials, potentially leading to unauthorized access and interception of data from connected devices, such as smartphones.