{"id":"CVE-2025-25732","aliases":["EUVD-2025-25802","GHSA-g789-9h8j-6whm"],"status":"published","title":"Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 \u0026 RIS-9260...","description":"Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 \u0026 RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.0037,"percentile":0.31302,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284","CWE-922"],"published":"2025-08-26T00:00:00Z","modified":"2026-06-17T09:01:03Z","products":[{"vendor":"kapsch","product":"ris-9160_firmware"},{"vendor":"kapsch","product":"ris-9260_firmware"}],"references":[{"url":"https://cwe.mitre.org/data/definitions/922.html","tags":["Technical Description"]},{"url":"https://www.kapsch.net/en","tags":["Product"]},{"url":"https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf","tags":["Broken Link"]},{"url":"https://www.kapsch.net/_Resources/Persistent/55fb8d0fb279262809eac88d457894db1b3efcd5/Kapsch_RIS-9160_Datasheet_EN.pdf","tags":["Product"]},{"url":"https://www.kapsch.net/en/press/releases/ktc-20200813-pr-en","tags":["Product"]},{"url":"https://phrack.org/issues/72/16_md","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25732"},{"url":"https://github.com/advisories/GHSA-g789-9h8j-6whm"}],"sources":{"cve":[{"id":"CVE-2025-25732","description":"Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 \u0026 RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root.","status":"published","published":"2025-08-26T00:00:00Z","modified":"2025-10-22T14:55:34.618Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:32:31.971896Z"}],"euvd":[{"id":"EUVD-2025-25802","description":"Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 \u0026 RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root.","status":"published","published":"2025-08-26T00:00:00Z","modified":"2025-10-22T14:55:34Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:38.726368Z"}],"ghsa":[{"id":"GHSA-g789-9h8j-6whm","title":"Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 \u0026 RIS-9260...","description":"Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 \u0026 RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root.","status":"published","published":"2025-08-26T15:31:02Z","modified":"2025-10-22T15:32:08Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-284","CWE-922"],"updated_at":"2026-11-02T15:04:10.961511Z"}],"nvd":[{"id":"CVE-2025-25732","description":"Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 \u0026 RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root.","status":"published","published":"2025-08-26T15:15:42.08Z","modified":"2026-06-17T09:01:03.38Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:11:25.826804Z"}]}}