VULNERABILITY INTELLIGENCE

CVE-2025-25732

CVSS score6.8 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2025-08-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-922

Primary references