PT-2025-12823 · Audi · Audi Universal Traffic Recorder

Publicado 2025-03-25 · Atualizado 2025-03-25 · CVE-2025-30118

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Audi Universal Traffic Recorder version 2.88

Description The issue concerns susceptibility to denial of service. It uses the same default credentials for all devices and does not implement proper multi-device authentication, allowing attackers to deny the owner access by occupying the only available connection. The SSID remains broadcast at all times, increasing exposure to potential attacks.

Recommendations For Audi Universal Traffic Recorder version 2.88, consider changing the default credentials to unique ones for each device and implement proper multi-device authentication to prevent unauthorized access. As a temporary workaround, restrict access to the device's connection to minimize the risk of denial of service attacks.

Exploit

Correção

DoS

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2025-30118

Produtos afetados

Audi Universal Traffic Recorder

Referências · 5

• 🔥 https://github.com/geo-chen/Audi/blob/main/README.md#finding-1---cve-2025-30118-audi-utr-susceptibility-to-dos · Exploit
• https://t.me/cvetracker/19904 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1904632792459210937 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-30118 · Nota de Segurança
• https://t.me/cvedetector/21136 · Publicação no Telegram