CVE-2025-45587
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via crafted input.
Risk Assessment
This may lead to FTP service unavailability and disruption of device operation. In extreme cases, it could enable further attacks.
Recommendation
Update Audi UTR 2.0 software to a patched version. Restrict access to the FTP service and implement input validation.
Other vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder
See all- CVE-2025-45583Critical
Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username and password.
- CVE-2025-45586High
An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.
- CVE-2025-45584High
Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.
Original NVD description (English source)
A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS