Medium severity5.4NVD Advisory· Published Sep 12, 2025· Updated Jun 17, 2026
CVE-2025-45585
CVE-2025-45585
Description
Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the wifi_sta_ssid or wifi_ap_ssid parameters.
Affected products
32.0+ 1 more
- (no CPE)range: 2.0
- (no CPE)
- cpe:2.3:o:audi:universal_traffic_recorder_firmware:1.52:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- 2barbie.notion.site/2024-Audi-UTR-2-0-Report-1bff0be688c680cb8795efe78732f8b9nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.