Audi records

6 published records for vendor audi.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2025-45583No exploit	Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the servicaudi · universal traffic recorder firmware · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.4%	Sep 12, 2025
30Monitor	CVE-2025-45584No exploit	Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information withaudi · universal traffic recorder firmware · CWE-284 Pre-auth Auth bypass Broken access control (IDOR)	High7.5	—	0.4%	Sep 12, 2025
30Monitor	CVE-2025-45586No exploit	An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.audi · universal traffic recorder firmware · CWE-434 Pre-auth File upload	High7.5	—	0.3%	Sep 12, 2025
28Monitor	CVE-2020-27524No exploit	On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N+R_CN_AU_P0395) mishandles %x and %s format striaudi · mmi multiplayer · CWE-134 Pre-auth	High7.1	—	1.2%	Nov 11, 2020
28Monitor	CVE-2025-45587No exploit	A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via aaudi · universal traffic recorder firmware · CWE-121 Pre-auth Memory safety	High7.0	—	0.3%	Sep 12, 2025
21Monitor	CVE-2025-45585No exploit	Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute arbitraudi · universal traffic recorder firmware · CWE-79 RCE XSS	Medium5.4	—	0.2%	Sep 12, 2025

CVE-2025-45583
36Monitor
Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the servic
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
audi · universal traffic recorder firmwareSep 12, 2025
CVE-2025-45584
30Monitor
Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information with
HighCVSS 7.5No exploitEPSS 0%
audi · universal traffic recorder firmwareSep 12, 2025
CVE-2025-45586
30Monitor
An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- File upload
audi · universal traffic recorder firmwareSep 12, 2025
CVE-2020-27524
28Monitor
On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N+R_CN_AU_P0395) mishandles %x and %s format stri
HighCVSS 7.1No exploitEPSS 1%
- Pre-auth
audi · mmi multiplayerNov 11, 2020
CVE-2025-45587
28Monitor
A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via a
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Memory safety
audi · universal traffic recorder firmwareSep 12, 2025
CVE-2025-45585
21Monitor
Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute arbitr
MediumCVSS 5.4No exploitEPSS 0%
- RCE
- XSS
audi · universal traffic recorder firmwareSep 12, 2025