CVE-2025-25732

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-08-26 · updated 2026-06-17
Weakness: CWE-922

Description

Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root.

Affected products

Kapsch Ris-9160 Firmware: 3.2.0.829.23, 3.8.0.1119.42, 4.6.0.1211.28
Kapsch Ris-9260 Firmware: 3.2.0.829.23, 3.8.0.1119.42, 4.6.0.1211.28

References

https://cwe.mitre.org/data/definitions/922.html
https://phrack.org/issues/72/16_md
https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf
https://www.kapsch.net/_Resources/Persistent/55fb8d0fb279262809eac88d457894db1b3efcd5/Kapsch_RIS-9160_Datasheet_EN.pdf
https://www.kapsch.net/en
https://www.kapsch.net/en/press/releases/ktc-20200813-pr-en

Get alerted when CVE-2025-25732 or the next vulnerability affects your stack