high7.5
CVE-2025-45584
Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.
Impact
Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Audi | Universal Traffic Recorder Firmware | Version 1.52 |