216.73.217.64

CVE-2025-25733

· Published 26/08/2025 15:15 · Modified 26/08/2025 17:15

Labels: CVE-2025-25733 2025-08-26CVE-2025-25733CWE-284[email protected]

Essential information

Published
26/08/2025 15:15
Modified
26/08/2025 17:15
Author
—
Creator
—
CVSS
5.3 MEDIUM (v3.1)
CISA KEV
No
CWE
—
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS metrics

Description

Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows physically proximate attackers to arbitrarily modify SPI flash regions, leading to a degradation of the security posture of the device.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
kapsch trafficcom / ris-9160 cpe:2.3:a:kapsch_trafficcom:ris-9160:3.2.0.829.23:*:*:*:*:*:*:*
kapsch trafficcom / ris-9260 cpe:2.3:a:kapsch_trafficcom:ris-9260:3.8.0.1119.42:*:*:*:*:*:*:*
kapsch trafficcom / ris-9160 cpe:2.3:a:kapsch_trafficcom:ris-9160:4.6.0.1211.28:*:*:*:*:*:*:*
kapsch trafficcom / ris-9260 cpe:2.3:a:kapsch_trafficcom:ris-9260:4.6.0.1211.28:*:*:*:*:*:*:*

References