Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-25615 State: PUBLISHED Published: 2025-03-10T00:00:00.000Z Last Updated: 2025-03-12T18:43:12.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/changeweb/Unifiedtransform - https://github.com/armaansidana2003/CVE-2025-25615
CVE ID: CVE-2025-25616 State: PUBLISHED Published: 2025-03-10T00:00:00.000Z Last Updated: 2025-03-12T18:41:58.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?exam_rule_id=1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/changeweb/Unifiedtransform - https://github.com/armaansidana2003/CVE-2025-25616
CVE ID: CVE-2025-25617 State: PUBLISHED Published: 2025-03-07T00:00:00.000Z Last Updated: 2025-03-07T18:05:07.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/changeweb/Unifiedtransform - https://github.com/armaansidana2003/CVE-2025-25617
CVE ID: CVE-2025-25618 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-17T18:07:08.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teachers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/changeweb/Unifiedtransform - https://github.com/armaansidana2003/CVE-2025-25618
CVE ID: CVE-2025-25620 State: PUBLISHED Published: 2025-03-10T00:00:00.000Z Last Updated: 2025-03-10T18:47:19.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/changeweb/Unifiedtransform - https://github.com/armaansidana2003/CVE-2025-25620
CVE ID: CVE-2025-25621 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-17T18:00:30.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected endpoint is /courses/teacher/index?teacher_id=2&semester_id=1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/changeweb/Unifiedtransform - https://github.com/armaansidana2003/CVE-2025-25621
CVE ID: CVE-2025-25625 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-19T18:32:47.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting vulnerability exists in FS model S3150-8T2F switches running firmware s3150-8t2f-switch-fsos-220d_118101 and web firmware v2.2.2, which allows an authenticated web interface user to bypass input filtering on user names, and stores un-sanitized HTML and Javascript on the device. Pages which then present the user name without encoding special characters will then cause the injected code to be parsed by the browsers of other users accessing the web interface. Additional Analyst Notes: - CISA AD
jected code to be parsed by the browsers of other users accessing the web interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/whitewhale-dmb/Vulnerability-Research/tree/main/CVE-2025-25625
CVE ID: CVE-2025-25632 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-06T14:26:33.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Pr0b1em/IoT/blob/master/TendaAC15v15.03.05.19telnet.md
CVE ID: CVE-2025-25634 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-06T21:49:28.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been found in Tenda AC15 15.03.05.19 in the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src leads to stack-based buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Pr0b1em/IoT/blob/master/TendaAC15v15.03.05.19GetParentControlInfo.md
CVE ID: CVE-2025-25635 State: PUBLISHED Published: 2025-02-28T00:00:00.000Z Last Updated: 2025-09-02T15:55:23.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/TOTOLINK-A3002R-formIpv6Setup-pppoe_dns1.md
CVE ID: CVE-2025-25650 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-19T18:29:12.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards to bypass authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.getkisi.com/blog/how-to-copy-access-cards-and-keyfobs - https://media.blackhat.com/us-13/US-13-Brown-RFID-Hacking-Live-Free-or-RFID-Hard-Slides.pdf - https://github.com/AbhijithAJ/Dorset_SmartLock_Vulnerability/blob/main/Dorset_Smart_Lock_Security_Assessment_Report.pdf
CVE ID: CVE-2025-25662 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-21T17:34:02.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda O4 V3.0 V1.0.0.10(2936) is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/type/time. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jangfan/my-vuln/blob/main/Tenda/O4V3/setMacFilterList.md
CVE ID: CVE-2025-25663 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-21T17:27:05.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/WifiExtraSet.md
CVE ID: CVE-2025-25664 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-21T17:24:32.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/SetIpMacBind.md
CVE ID: CVE-2025-25667 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-21T17:22:18.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/saveParentControlInfo.md
CVE ID: CVE-2025-25668 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-21T17:20:48.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_47D878 function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/setMacFilterCfg.md
CVE ID: CVE-2025-25674 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-21T17:31:44.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jangfan/my-vuln/blob/main/Tenda/AC10V1/fast_setting_wifi_set.md
CVE ID: CVE-2025-25675 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-21T17:30:19.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmd_buf variable, which is directly used in the doSystemCmd function, causing an arbitrary command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jangfan/my-vuln/blob/main/Tenda/AC10V1/formexeCommand.md
CVE ID: CVE-2025-25676 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-21T17:28:41.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jangfan/my-vuln/blob/main/Tenda/i12V1/wifiSSIDget.md
CVE ID: CVE-2025-25678 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-21T17:19:22.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jangfan/my-vuln/blob/main/Tenda/i12V1/setcfm.md
CVE ID: CVE-2025-25679 State: PUBLISHED Published: 2025-02-20T00:00:00.000Z Last Updated: 2025-02-24T17:21:46.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jangfan/my-vuln/blob/main/Tenda/i12V1/WifiMacFilterSet.md
CVE ID: CVE-2025-25680 State: PUBLISHED Published: 2025-03-11T00:00:00.000Z Last Updated: 2025-03-21T20:44:34.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuya_ipc_direct_connect function of the anyka_ipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Yasha-ops/LSC_Indoor_PTZ_Camera-RCE - https://github.com/Yasha-ops/vulnerability-research/tree/master/CVE-2025-25680
CVE ID: CVE-2025-25683 State: PUBLISHED Published: 2025-03-12T00:00:00.000Z Last Updated: 2025-03-12T18:35:10.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF files. This affects AlekSIS-Core 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2.0 and 3.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://edugit.org/AlekSIS/official/AlekSIS-Core/-/issues/1180 - https://aleksis.org/news/2025/01/security-advisory-cve-2025-25683-pdf-files-accessible-without-authentication/
CVE ID: CVE-2025-25684 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-19T19:33:00.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of validation in the path parameter (/download) of GL-INet Beryl AX GL-MT3000 v4.7.0 allows attackers to download arbitrary files from the device's file system via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/@tfortinsec/multiple-path-traversal-vulnerabilities-in-the-beryl-ax-gl-mt300-router-e7f856d14af9
CVE ID: CVE-2025-25685 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-21T13:41:40.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GL-INet Beryl AX GL-MT3000 v4.7.0. Attackers are able to download arbitrary files from the device's file system via adding symbolic links on an external drive used as a samba share. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://medium.com/@tfortinsec/multiple-path-traversal-vulnerabilities-in-the-beryl-ax-gl-mt300-router-e7f856d14af9
CVE ID: CVE-2025-25686 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T15:17:30.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: semcms <=5.0 is vulnerable to SQL Injection in SEMCMS_Fuction.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/J1095/fkapfxx
CVE ID: CVE-2025-25691 State: PUBLISHED Published: 2025-07-30T00:00:00.000Z Last Updated: 2025-07-30T18:59:02.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PrestaShop/PrestaShop - http://prestashop.com - http://dem0.com - http://dem0.com/admin/index.php/improve/design/themes/import?_token=btRUtV2Om2noliZZjeFQZhlMY3gYivjABbPOjP91L6U - https://github.com/3em0/cve_repo/blob/main/preshop/CVE-2025-25691.md
CVE ID: CVE-2025-25692 State: PUBLISHED Published: 2025-07-30T00:00:00.000Z Last Updated: 2025-07-30T18:55:36.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PrestaShop/PrestaShop - http://prestashop.com - https://github.com/3em0/cve_repo/blob/main/preshop/CVE-2025-25692.md
CVE ID: CVE-2025-25709 State: PUBLISHED Published: 2025-03-12T00:00:00.000Z Last Updated: 2025-03-12T16:24:23.389Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the addUser and updateUser endpoints Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/z5jt/vulnerability-research/tree/main/CVE-2025-25709
CVE ID: CVE-2025-25711 State: PUBLISHED Published: 2025-03-12T00:00:00.000Z Last Updated: 2025-03-12T15:49:57.512Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the ProfileID value to the [/tnexus/rest/admin/updateUser] API endpoint Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/z5jt/vulnerability-research/tree/main/CVE-2025-25710
CVE ID: CVE-2025-25723 State: PUBLISHED Published: 2025-02-28T00:00:00.000Z Last Updated: 2025-04-03T18:56:46.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in GPAC version 2.5 allows a local attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/3089 - https://github.com/gpac/gpac/commit/74e26b8dfeb0ab8c7317603b80a18306d0698473
CVE ID: CVE-2025-25724 State: PUBLISHED Published: 2025-03-02T00:00:00.000Z Last Updated: 2025-03-04T19:00:41.262Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: libarchive Products: libarchive Problem Types: CWE-252 Description: list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ekkosun/pocs/blob/main/bsdtarbug - https://g
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ekkosun/pocs/blob/main/bsdtarbug - https://github.com/libarchive/libarchive/blob/b439d586f53911c84be5e380445a8a259e19114c/tar/util.c#L751-L752 - https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92
CVE ID: CVE-2025-25725 State: REJECTED Published: N/A Last Updated: 2025-03-02T01:57:44.581Z Description: No description available.
CVE ID: CVE-2025-25726 State: REJECTED Published: N/A Last Updated: 2025-03-02T01:54:53.523Z Description: No description available.
CVE ID: CVE-2025-25727 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-03-19T20:45:20.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store passwords in cleartext. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/2025/02/27/cve-2025-25727cve-2025-25728cve-2025-25729-multiple-vulnerabilities-found-in-bosscomm-obd2-tablet/
CVE ID: CVE-2025-25728 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-03-19T20:44:30.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to send communications to the update API in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/2025/02/27/cve-2025-25727cve-2025-25728cve-2025-25729-multiple-vulnerabilities-found-in-bosscomm-obd2-tablet/
CVE ID: CVE-2025-25729 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-02-28T15:46:55.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability in Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 allows attackers to obtain hardcoded cleartext credentials via the update or boot process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/2025/02/27/cve-2025-25727cve-2025-25728cve-2025-25729-multiple-vulnerabilities-found-in-bosscomm-obd2-tablet/
CVE ID: CVE-2025-25730 State: PUBLISHED Published: 2025-02-27T00:00:00.000Z Last Updated: 2025-02-28T20:03:00.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Motorola Mobility Droid Razr HD (Model XT926) System Version: 9.18.94.XT926.Verizon.en.US allows physically proximate unauthorized attackers to access USB debugging, leading to control of the host device itself. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/2025/02/27/cve-2025-25730-developer-options-and-usb-debugging-authorization-bypass/
CVE ID: CVE-2025-25732 State: PUBLISHED Published: 2025-08-26T00:00:00.000Z Last Updated: 2025-10-22T14:55:34.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/922.html - https://www.kapsch.net/en - https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34de
922.html - https://www.kapsch.net/en - https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf - https://www.kapsch.net/_Resources/Persistent/55fb8d0fb279262809eac88d457894db1b3efcd5/Kapsch_RIS-9160_Datasheet_EN.pdf - https://www.kapsch.net/en/press/releases/ktc-20200813-pr-en - https://phrack.org/issues/72/16_md
CVE ID: CVE-2025-25733 State: PUBLISHED Published: 2025-08-26T00:00:00.000Z Last Updated: 2025-10-22T14:55:49.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows physically proximate attackers to arbitrarily modify SPI flash regions, leading to a degradation of the security posture of the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kapsch.net/en - https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf - https://www
w.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf - https://www.kapsch.net/_Resources/Persistent/55fb8d0fb279262809eac88d457894db1b3efcd5/Kapsch_RIS-9160_Datasheet_EN.pdf - https://www.kapsch.net/en/press/releases/ktc-20200813-pr-en - https://cwe.mitre.org/data/definitions/1233.html - https://phrack.org/issues/72/16_md
CVE ID: CVE-2025-25734 State: PUBLISHED Published: 2025-08-26T00:00:00.000Z Last Updated: 2025-10-22T14:58:01.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discovered to contain an unauthenticated EFI shell which allows attackers to execute arbitrary code or escalate privileges during the boot process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kapsch.net/en - https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf - https://www.kapsch.net/_Resources/Persistent/55fb8d0
8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf - https://www.kapsch.net/_Resources/Persistent/55fb8d0fb279262809eac88d457894db1b3efcd5/Kapsch_RIS-9160_Datasheet_EN.pdf - https://www.kapsch.net/en/press/releases/ktc-20200813-pr-en - https://cwe.mitre.org/data/definitions/1233.html - https://phrack.org/issues/72/16_md
CVE ID: CVE-2025-25735 State: PUBLISHED Published: 2025-08-26T00:00:00.000Z Last Updated: 2025-10-22T14:58:09.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Protected Range Registers (PRRs), allowing attackers with software running on the system to modify SPI flash in real-time. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kapsch.net/en - https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf - https://www.kapsch.net/_Resources/Persistent/55fb8d0f
445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf - https://www.kapsch.net/_Resources/Persistent/55fb8d0fb279262809eac88d457894db1b3efcd5/Kapsch_RIS-9160_Datasheet_EN.pdf - https://www.kapsch.net/en/press/releases/ktc-20200813-pr-en - https://cwe.mitre.org/data/definitions/1233.html - https://phrack.org/issues/72/16_md