IROAD Dash Cam X5 and X6 Origin Validation Error Vulnerability in Domain Handler

A vulnerability exists in the IROAD Dash Cam X5 and X6 models released prior to March 8, 2025. The issue lies within the Domain Handler component, where an origin validation error is introduced by improper handling of the Domain Name argument. This flaw allows for remote manipulation, although the complexity of exploitation is considered high.

Impact

Exploitation of this vulnerability could lead to an origin validation error, allowing for potential interception of sensitive device traffic. If the dashcam attempts to resolve the unregistered public domain over the internet, it could result in data exfiltration or a man-in-the-middle attack.