CVEvulnerability
CVE-2025-25732
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-08-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-922
Description
Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root.
Affected configurations
• kapsch ris-9160 firmware 3.2.0.829.23
• kapsch ris-9160 firmware 3.8.0.1119.42
• kapsch ris-9160 firmware 4.6.0.1211.28
• kapsch ris-9260 firmware 3.2.0.829.23
• kapsch ris-9260 firmware 3.8.0.1119.42
• kapsch ris-9260 firmware 4.6.0.1211.28
Related
Weakness · CWE (1)
- CWE-922 Insecure Storage of Sensitive Information weakness
References
- https://cwe.mitre.org/data/definitions/922.html Technical Description
- https://phrack.org/issues/72/16_md Exploit, Third Party Advisory
- https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf Broken Link
- https://www.kapsch.net/_Resources/Persistent/55fb8d0fb279262809eac88d457894db1b3efcd5/Kapsch_RIS-9160_Datasheet_EN.pdf Product
- https://www.kapsch.net/en Product
- https://www.kapsch.net/en/press/releases/ktc-20200813-pr-en Product