7.5
CVE-2025-45584
- EPSS 0.07%
- Veröffentlicht 12.09.2025 00:00:00
- Zuletzt bearbeitet 16.10.2025 15:37:43
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginIncorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Audi ≫ Universal Traffic Recorder Firmware Version1.52
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.211 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.