CVE-2025-25734

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-08-26 · updated 2026-06-17
Weakness: CWE-284

Description

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discovered to contain an unauthenticated EFI shell which allows attackers to execute arbitrary code or escalate privileges during the boot process.

Affected products

Kapsch Ris-9160 Firmware: 3.2.0.829.23, 3.8.0.1119.42, 4.6.0.1211.28
Kapsch Ris-9260 Firmware: 3.2.0.829.23, 3.8.0.1119.42, 4.6.0.1211.28

References

https://cwe.mitre.org/data/definitions/1233.html
https://phrack.org/issues/72/16_md
https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf
https://www.kapsch.net/_Resources/Persistent/55fb8d0fb279262809eac88d457894db1b3efcd5/Kapsch_RIS-9160_Datasheet_EN.pdf
https://www.kapsch.net/en
https://www.kapsch.net/en/press/releases/ktc-20200813-pr-en

Get alerted when CVE-2025-25734 or the next vulnerability affects your stack