CVE-2025-45583
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username and password.
Risk Assessment
An attacker can gain unauthorized access to the FTP service, potentially leading to data reading or modification. This poses a serious threat to data confidentiality and integrity.
Recommendation
Update the Audi UTR 2.0 device software to a patched version or disable the FTP service if not required. Implement additional authentication mechanisms if possible.
Other vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder
See all- CVE-2025-45587High
A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via crafted input.
- CVE-2025-45586High
An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.
- CVE-2025-45584High
Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.
Original NVD description (English source)
Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username and password.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS