CVE-2025-2555

Summary

CVE-2025-2555 is a newly disclosed vulnerability that affects the Audi Universal Traffic Recorder App 2.0. The issue lies within an unknown function of the FTP Credentials component, which utilizes a hard-coded password. For an attack to succeed, the assailant must have local access. The complexity and exploitability of this vulnerability are considered rather high, and an exploit has already been made public. Users are advised to upgrade to version 2.89 or 2.90 to address the issue. The vendor has been responsive and professional, having already taken steps to address the problem for both new and existing customers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.