Submit #516883: IROAD Dashcam X series (X5, X6, etc) Improperly Preserved Integrity of Hardware Configuration State D

Managing Settings to Obtain Sensitive Data and Sabotaging Car Battery

The IROAD X series (X5, X6, etc) dashcam allows unauthorized users to modify critical system settings once connected to its network. Attackers can extract sensitive car and driver information, mute dashcam alerts to prevent detection, disable recording functionality, or even factory reset the device. Additionally, they can disable battery protection, causing the dashcam to drain the car battery when left on overnight. These actions not only compromise privacy but also pose potential physical harm by rendering the dashcam non-functional or causing vehicle battery failure.

• Source: ⚠️ https://github.com/geo-chen/IROAD/blob/main/README.md#finding-5-managing-settings-to-obtain-sensitive-data-and-sabotaging-car-battery
• User: geochen (UID 78995)
• Submission: 03/08/2025 17:35 (1 Year ago)
• Moderation: 03/15/2025 19:22 (7 days later)
• Status: Accepted
• VulDB entry: 299811 [IROAD Dash Cam X5/Dash Cam X6 up to 20250308 improper authorization]
• Points: 20