Unrated severityNVD Advisory· Published Aug 26, 2025· Updated Oct 22, 2025

CVE-2025-25736

Description

Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge (ADB) pre-installed (/mnt/c3platpersistent/opt/platform-tools/adb) and enabled by default, allowing unauthenticated root shell access to the cellular modem via the default 'kapsch' user.

Affected products

Kapsch TrafficCom/RIS-9260 RSU LEOdescription
Kapsch TrafficCom/RIS-9260llm-fuzzy
Range: v3.2.0.829.23, v3.8.0.1119.42, v4.6.0.1211.28

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

cwe.mitre.org/data/definitions/306.htmlmitre
phrack.org/issues/72/16_mdmitre
www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdfmitre
www.kapsch.net/enmitre
www.kapsch.net/en/press/releases/ktc-20200813-pr-enmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000