ROADCAM X3 Hardcoded FTP Credentials Vulnerability

A vulnerability exists in the ROADCAM X3 dashcam's mobile application, Viidure version 1.5, due to hardcoded FTP credentials for the FTPX user account. This flaw allows unauthorized access to the device's file system, enabling attackers to download sensitive recorded video footage. The issue arises from the inclusion of fixed FTP login details within the app, which can be exploited to access and extract private data without user consent.

Impact

Exploitation of this vulnerability allows for unauthorized access to the dashcam's file system via FTP, where all recorded video footage can be downloaded. This access could lead to the exposure of sensitive personal data captured by the device.