CVE-2025-45583: Audi Universal Traffic Recorder Firmware

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username and password.

Affected products

• Audi Universal Traffic Recorder Firmware: version 1.52 only

Published 2025-09-12. Last modified 2026-06-17.