CVE-2025-1881 Details
Description
A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Video Footage/Live Video Stream. The manipulation leads to improper access controls. The attack can be launched remotely. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.
A vulnerability exists in i-Drive dashcam models i11 and i12, all firmware versions prior to 20250227. The issue lies in the video footage and live video stream components, where improper access controls allow remote attackers to access and manipulate video data. The vulnerability is particularly concerning as it can be exploited to dump recorded footage, stream live video, and access sensitive information through the dashcam's settings.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 4, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/geo-chen/i-Drive | [email protected] | Third Party Advisory |
| https://vuldb.com/?ctiid.298195 | [email protected] | Permissions Required |
| https://vuldb.com/?id.298195 | [email protected] | Permissions Required |
| https://vuldb.com/?submit.510952 | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-266 | Incorrect Privilege Assignment | [email protected] |
| CWE-284 | Improper Access Control | [email protected] |
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| i-drive i11 firmware | <= 20250227 |
CPE
Remediation
| |
| i-drive i11 | All versions |
CPE
Remediation
| |
| i-drive i12 firmware | <= 20250227 |
CPE
Remediation
| |
| i-drive i12 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 5, 2025 | Initial Analysis | [email protected] |
| Mar 3, 2025 | New CVE Received | [email protected] |