EUVD-2025-18958Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAccess local network
-
ExploitSend crafted request to Telnet demo.sh
-
ExecutionTrigger denial of service
-
ImpactDashcam crashes
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2021 - Security Misconfiguration
ASVS 5.0
V15 - Secure Coding and Architecture Resource release
|
| Exploitation Conditions | Requires local network access to the dashcam (AV:A) and low privileges (PR:L). The attack complexity is high (AC:H). The Telnet service must be enabled and the demo.sh script accessible. No user interaction needed (UI:N). |
| Impact | CVSS 4.0 base score 5.0 (Medium) with vector AV:A/AC:H/PR:L/UI:N/VA:H indicates local network access, high complexity, low privileges required, and high availability impact. EPSS score 0.06% (low probability) suggests exploitation is not widespread. No KEV listing. Public exploit exists but difficulty is high. Overall risk is low due to high complexity and local network requirement. |
| Exploit ScenarioDerived | An attacker on the same local network as the dashcam sends a crafted request to the Telnet service's demo.sh script, causing the device to crash. Public exploit code is available, but the attack requires high complexity and local network access. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv2 – Jul 26, 2026
Denial of service in 70mai M300 dashcam firmware up to 20250611 allows an attacker on the local network to crash the device via the Telnet service's demo.sh script. A public exploit exists, but exploitation requires local network access and high attack complexity. No active exploitation in CISA KEV.
Earlier versions of this analysis (1)
RemediationAI
No vendor patch available as vendor did not respond. Compensating controls: disable Telnet service if not needed, restrict network access to the dashcam (e.g., VLAN segmentation, firewall rules blocking Telnet port 23), or upgrade to a newer firmware version if released. Disabling Telnet may affect remote management functionality.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability affects the Telnet service on 70mai M300 dashcam firmware, specifically the demo.sh script. The root cause is a denial of service condition (CWE-404) triggered by manipulating the script. The CPE indicates the firmware is the affected product. Telnet is a legacy protocol providing unencrypted remote access, often used in embedded devices for debugging.
Know when M300 Firmware gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
AV:A local network, AC:H high complexity, PR:L low privileges, A:H availability impact.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was found in 70mai M300 up to 20250611. It has been classified as problematic. This affects an unknown part of the file demo.sh of the component Telnet Service. The manipulation leads to denial of service. Access to the local network is required for this attack. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Executive ViewAI
Organizations using 70mai M300 should be aware of moderate risk from CVE-2025-6530 rated CVSS 4.8. Exploitation could compromise the security of affected deployments. Proof-of-concept code is publicly available. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: restrict network access and enable monitoring.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
More in M300 Firmware
View allRemote code execution via default Telnet credentials in 70mai M300 dashcam firmware (versions up to 20250611) allows adj
Improper authentication in 70mai M300 dashcam firmware up to 20250611 allows local network attackers to access the RTSP
A security vulnerability in 70mai M300 (CVSS 3.1). Risk factors: public PoC available.
Exposed root password via unauthenticated HTTP server in 70mai M300 dashcam firmware up to 20250611 allows local network
Exploit-DB