What is CVE-2025-30112?

CVE-2025-30112 is a high-severity vulnerability in N/a, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 7.1/10. Published 2025-03-24.

How severe is CVE-2025-30112?

High severity. CVSS v3 base score is 7.1 out of 10.

Is CVE-2025-30112 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2025-30112

On 70mai Dash Cam 1S devices, by connecting directly to the dashcam's network and accessing the API on port 80 and RTSP on port 554, an attacker can bypass the device authorization mechanism from the official mobile app that requires a user to physically press on the power button during a connection.

EPSS: 0.003 (19.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-288 — Authentication Bypass Using an Alternate Path or Channel

Public proof-of-concept exploits

geo-chen/70mai

References

Frequently asked questions

What is CVE-2025-30112?: CVE-2025-30112 is a high-severity vulnerability in N/a, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 7.1/10. Published 2025-03-24.
How severe is CVE-2025-30112?: High severity. CVSS v3 base score is 7.1 out of 10.
Is CVE-2025-30112 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.