IROAD Q Series Dashcam Hardcoded Default Credentials Allow Network Sniffing

A vulnerability exists in IROAD Q Series dashcams, including the Q9 model, due to hardcoded default Wi-Fi passwords that cannot be changed by the user. This flaw enables an attacker within Wi-Fi range to connect to the dashcam's network and intercept data from connected devices, such as the user's smartphone.

Impact

Exploitation of this vulnerability allows for unauthorized access to the dashcam's network, where an attacker can perform data sniffing on connected devices.