CVE-2025-45584
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.
Risk Assessment
An unauthenticated attacker can access vehicle data, potentially compromising privacy and information security.
Recommendation
Apply vendor patches or restrict access to the web service and enforce authentication.
Other vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0
See all- CVE-2025-45583Critical
Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username and password.
- CVE-2025-45587High
A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via crafted input.
- CVE-2025-45586High
An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.
Original NVD description (English source)
Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS