{"id":"CVE-2025-25732","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-25732","generatedAt":"2026-10-28T06:14:47.571Z","title":"Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own,…","description":"Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root.","published":"2025-08-26T15:15:42.000Z","lastModified":"2026-06-17T09:01:03.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":6.8,"severity":"MEDIUM","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-922"],"affected":["kapsch/ris-9160 firmware","kapsch/ris-9260 firmware"],"epss":{"score":0.0037,"percentile":0.30727,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://cwe.mitre.org/data/definitions/922.html","tags":["Technical Description"],"source":"cve@mitre.org"},{"url":"https://phrack.org/issues/72/16_md","tags":["Exploit","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://www.kapsch.net/_Resources/Persistent/55fb8d0fb279262809eac88d457894db1b3efcd5/Kapsch_RIS-9160_Datasheet_EN.pdf","tags":["Product"],"source":"cve@mitre.org"},{"url":"https://www.kapsch.net/en","tags":["Product"],"source":"cve@mitre.org"},{"url":"https://www.kapsch.net/en/press/releases/ktc-20200813-pr-en","tags":["Product"],"source":"cve@mitre.org"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-25732","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}