Audi kayıtları
audi üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-121 Stack-based Buffer Overflow1
- CWE-134 Use of Externally-Controlled Format String1
- CWE-284 Improper Access Control1
- CWE-287 Improper Authentication1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2025-45583İstismar yok | Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the servicaudi · universal traffic recorder firmware · CWE-287 | Kritik9,1 | — | %0,4 | 12 Eyl 2025 |
30İzleyin | CVE-2025-45584İstismar yok | Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information withaudi · universal traffic recorder firmware · CWE-284 | Yüksek7,5 | — | %0,4 | 12 Eyl 2025 |
30İzleyin | CVE-2025-45586İstismar yok | An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.audi · universal traffic recorder firmware · CWE-434 | Yüksek7,5 | — | %0,3 | 12 Eyl 2025 |
28İzleyin | CVE-2020-27524İstismar yok | On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N+R_CN_AU_P0395) mishandles %x and %s format striaudi · mmi multiplayer · CWE-134 | Yüksek7,1 | — | %1,2 | 11 Kas 2020 |
28İzleyin | CVE-2025-45587İstismar yok | A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via aaudi · universal traffic recorder firmware · CWE-121 | Yüksek7,0 | — | %0,3 | 12 Eyl 2025 |
21İzleyin | CVE-2025-45585İstismar yok | Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute arbitraudi · universal traffic recorder firmware · CWE-79 | Orta5,4 | — | %0,2 | 12 Eyl 2025 |
- CVE-2025-4558336İzleyin
Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the servic
KritikCVSS 9,1İstismar yokEPSS %0audi · universal traffic recorder firmware12 Eyl 2025
- CVE-2025-4558430İzleyin
Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information with
YüksekCVSS 7,5İstismar yokEPSS %0audi · universal traffic recorder firmware12 Eyl 2025
- CVE-2025-4558630İzleyin
An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.
YüksekCVSS 7,5İstismar yokEPSS %0audi · universal traffic recorder firmware12 Eyl 2025
- CVE-2020-2752428İzleyin
On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N+R_CN_AU_P0395) mishandles %x and %s format stri
YüksekCVSS 7,1İstismar yokEPSS %1audi · mmi multiplayer11 Kas 2020
- CVE-2025-4558728İzleyin
A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via a
YüksekCVSS 7,0İstismar yokEPSS %0audi · universal traffic recorder firmware12 Eyl 2025
- CVE-2025-4558521İzleyin
Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute arbitr
OrtaCVSS 5,4İstismar yokEPSS %0audi · universal traffic recorder firmware12 Eyl 2025