Approved changes feed: RSS · Atom

cpe:2.3:h:audi:universal_traffic_recorder:2.0:*:*:*:*:*:*:*

part: h version: 2.0 update: *

VendorAudi (3ef6bd03-a25f-5501-b98d-d75a05739344)
ProductUniversal Traffic Recorder (7fc5798a-8b99-52ce-bcf3-823cd4a1ba92)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-45587 not_vulnerable 2026-06-08 07:25:11.037309 Details available
A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Published: 2025-09-12T00:00:00.000Z
Updated: 2025-09-15T15:41:46.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45586 not_vulnerable 2026-06-08 07:25:11.036946 Details available
An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.
Published: 2025-09-12T00:00:00.000Z
Updated: 2025-09-15T15:11:18.070Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45585 not_vulnerable 2026-06-08 07:25:11.036564 Details available
Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the wifi_sta_ssid or wifi_ap_ssid parameters.
Published: 2025-09-12T00:00:00.000Z
Updated: 2025-09-15T15:11:24.882Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45584 not_vulnerable 2026-06-08 07:25:11.035988 Details available
Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.
Published: 2025-09-12T00:00:00.000Z
Updated: 2025-09-15T15:11:31.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45583 not_vulnerable 2026-06-08 07:25:11.035454 Details available
Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username and password.
Published: 2025-09-12T00:00:00.000Z
Updated: 2025-09-15T15:11:36.983Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.