IROAD Dashcam V Public Domain Used for Internal Domain Name Vulnerability

A vulnerability exists in IROAD Dashcam V devices due to the use of an unregistered public domain name as an internal domain. This creates a security risk, as an attacker could register the domain and intercept sensitive device traffic. If the dashcam or related services resolve this domain over the public Internet instead of locally, it could result in data exfiltration or man-in-the-middle attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized interception of device traffic, allowing for data exfiltration or man-in-the-middle attacks.