Audi Universal Traffic Recorder Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Audi Universal Traffic Recorder Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-45583 — CVSS 9.1 (critical): Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the…
• CVE-2025-45584 — CVSS 7.5 (high): Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information…
• CVE-2025-45586 — CVSS 7.5 (high): An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.
• CVE-2025-45587 — CVSS 7.0 (high): A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via…
• CVE-2025-45585 — CVSS 5.4 (medium): Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute…