CVE-2025-7070 Information

Jul 05, 2025 cve

Description

A vulnerability has been found in IROAD Dashcam Q9 up to 20250624 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component MFA Pairing Request Handler. The manipulation leads to allocation of resources. The attack needs to be done within the local network. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Reference

https://github.com/geo-chen/IROAD-V?tab=readme-ov-file#finding-8—mfa-spam-to-induce-device-pairing-fatigue https://vuldb.com/?ctiid.314905 https://vuldb.com/?id.314905 https://vuldb.com/?submit.603298

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

LOW

Base Severity

4.3

CNNVD-202507-512 (Published: 2025-07-04)

Share on: