CVE-2025-45586
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.
Risk Assessment
This may lead to data modification or destruction, resulting in loss of system integrity and service availability.
Recommendation
Update Audi UTR 2.0 software to a patched version. Restrict access to the network interface and implement authentication for PUT requests.
Other vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder
See all- CVE-2025-45583Critical
Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username and password.
- CVE-2025-45587High
A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via crafted input.
- CVE-2025-45584High
Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.
Original NVD description (English source)
An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS