CVE-2025-45585

CVE-2025-45585 relates to Audi UTR 2.0 Universal Traffic Recorder 2.0, with multiple stored XSS vulnerabilities. The issue arises from injecting crafted payloads into the wifi_sta_ssid and wifi_ap_ssid parameters, enabling attackers to execute arbitrary web scripts or HTML in the affected context...

CVE-2025-45587

CVE-2025-45587 describes a stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 that allows attackers to cause a Denial of Service (DoS) via a crafted input. Affected component is the FTP service; root cause is a stack overflow. Documented impact: availability impact h...

CVE-2025-45583

CVE-2025-45583 affects Audi UTR 2.0 Universal Traffic Recorder 2.0. The vulnerability is an improper access control in the FTP protocol that allows an attacker to authenticate to the service using any username/password combination. CVSS metrics in the provided records indicate a CRITICAL base sco...

CVE-2025-45584

The CVE-2025-45584 entry concerns Audi UTR 2.0 Universal Traffic Recorder 2.0. The vulnerability is described as an incorrect access control in the web service, enabling attackers to download car information without authentication. CVSS v3.1 base metrics indicate high impact on confidentiality (C...

CVE-2025-45586

CVE-2025-45586 affects Audi UTR 2.0 Universal Traffic Recorder 2.0. The issue allows an attacker to arbitrarily overwrite files by sending a crafted PUT request. The connected sources consistently describe a file overwrite condition via a crafted PUT to the affected application, but do not provid...