CVE-2025-25737

The CVE-2025-25737 entry concerns Kapsch TrafficCom RIS-9160 and RIS-9260 Roadside Units (RSUs) with firmware versions 3.2.0.829.23, 3.8.0.1119.42, and 4.6.0.1211.28. The root cause is lack of strict password requirements for BIOS Supervisor and BIOS User accounts, which enables brute-force authe...