CVE-2025-30123

9.8 criticalEPSS 0.4%

Critical (9.8). EPSS 0.4% chance of exploitation in the next 30 days.

An issue was discovered on ROADCAM X3 devices. The mobile app APK (Viidure) contains hardcoded FTP credentials for the FTPX user account, enabling attackers to gain unauthorized access and extract sensitive recorded footage from the device.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2025-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/geo-chen/RoadCam
https://roadcam.my/pages/install-x3

Check your stack JSON