What is CVE-2025-30111?

CVE-2025-30111 is a high-severity vulnerability in N/a, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2025-03-18.

How severe is CVE-2025-30111?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2025-30111 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in N/a

CVE-2025-30111

On IROAD v9 devices, one can Remotely Dump Video Footage and the Live Video Stream. The dashcam exposes endpoints that allow unauthorized users, who gained access through other means, to list and download recorded videos, as well as access live video streams without proper authentication.

Vulnerability class: Broken Authentication

EPSS: 0.004 (34.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

Public proof-of-concept exploits

geo-chen/IROAD-V

References

Frequently asked questions

What is CVE-2025-30111?: CVE-2025-30111 is a high-severity vulnerability in N/a, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2025-03-18.
How severe is CVE-2025-30111?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2025-30111 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.