TI-2025-28806 Aliases CVE-2025-45587 GHSA-x8f8-m69m-rvh6

A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows…

MEDIUM 64CWE-121Published 2025-09-12 · Updated 2025-09-15

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: —
Confidentiality · integrity · availability: Low · Low · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00265 18th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:audi:universal_traffic_recorder_firmware:1.52:::::::*	1.52	Vulnerable	Audi
cpe:2.3:h:audi:universal_traffic_recorder:2.0:::::::*	2.0	Running on	Audi

cpe:2.3:o:audi:universal_traffic_recorder_firmware:1.52:*:*:*:*:*:*:* Versions 1.52 Vulnerable ·Audi
cpe:2.3:h:audi:universal_traffic_recorder:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·Audi

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-45587
2026-10-03 Alias added: GHSA-x8f8-m69m-rvh6

References

Exploit 1

https://2barbie.notion.site/2024-Audi-UTR-2-0-Report-1bff0be688c680cb8795efe78732f8b9

TI-2025-28802 Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder… CVSS 3.1CRITICAL 9.1
TI-2025-28805 An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily… CVSS 3.1HIGH 7.5
TI-2025-28803 Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder… CVSS 3.1HIGH 7.5
TI-2025-28804 Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal… CVSS 3.1MEDIUM 5.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences