VULNERABILITY INTELLIGENCE

CVE-2025-25735

CVSS score4.6 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-08-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Protected Range Registers (PRRs), allowing attackers with software running on the system to modify SPI flash in real-time.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-1233

Primary references