CVE-2025-45585

The Audi UTR 2.0 Universal Traffic Recorder 2.0 contains multiple stored cross-site scripting (XSS) vulnerabilities. These flaws originate from the improper neutralization of input during web page generation, specifically allowing attackers to inject crafted payloads into the wifi_sta_ssid or wif...

CVE-2025-45583

CVE-2025-45583 affects Audi UTR 2.0 Universal Traffic Recorder 2.0. The vulnerability is an improper access control in the FTP protocol that allows an attacker to authenticate to the service using any username/password combination. CVSS metrics in the provided records indicate a CRITICAL base sco...

CVE-2025-45587

A stack overflow vulnerability exists in the FTP service of the Audi UTR 2.0 Universal Traffic Recorder 2.0 in-vehicle car recording system. Attackers can exploit this flaw by providing crafted input to trigger a Denial of Service (DoS) . At this time, no information is provided regarding a newer...

CVE-2025-45584

The Audi UTR 2.0 Universal Traffic Recorder 2.0 contains a security vulnerability due to incorrect access control in its web service. This flaw allows unauthenticated attackers to download car information remotely. While the specific affected versions are not specified, the vulnerability is class...

CVE-2025-45586

CVE-2025-45586 affects Audi UTR 2.0 Universal Traffic Recorder 2.0. The issue allows an attacker to arbitrarily overwrite files by sending a crafted PUT request. The connected sources consistently describe a file overwrite condition via a crafted PUT to the affected application, but do not provid...