CVE-2025-45586

A

n issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:audi:universal_traffic_recorder_firmware:1.52:*:*:*:*:*:*:*
cpe:2.3:h:audi:universal_traffic_recorder:2.0:*:*:*:*:*:*:*

History

16 Oct 2025, 15:32

Type Values Removed Values Added
CPE cpe:2.3:o:audi:universal_traffic_recorder_firmware:1.52:*:*:*:*:*:*:*
cpe:2.3:h:audi:universal_traffic_recorder:2.0:*:*:*:*:*:*:*
References () https://2barbie.notion.site/2024-Audi-UTR-2-0-Report-1bff0be688c680cb8795efe78732f8b9 - () https://2barbie.notion.site/2024-Audi-UTR-2-0-Report-1bff0be688c680cb8795efe78732f8b9 - Exploit, Third Party Advisory
First Time Audi universal Traffic Recorder Firmware
Audi universal Traffic Recorder
Audi

15 Sep 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-09-12 21:15

Updated : 2025-10-16 15:32


NVD link : CVE-2025-45586

Mitre link : CVE-2025-45586

CVE.ORG link : CVE-2025-45586


JSON object : View

CWE
CWE-434

Unrestricted Upload of File with Dangerous Type