CVE-2025-45584

Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication

High · published September 12, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.1th percentile
Published
2025-09-12T00:00Z
EPSS history
Timeline
  • 12 SEP 00:00Z
    Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication
    cvelistv5