CNNVD-202508-3091 Information
CNNVD ID
CNNVD-202508-3091
Related CVE
- CNNVD Published: 2025-08-26
Description (Chinese)
Kapsch TrafficCom RIS-9260 RSU LEO和Kapsch TrafficCom RIS-9160都是奥地利Kapsch TrafficCom公司的一款道路测单元,具有智能交通中的车联网通信与协同管理功能。 Kapsch TrafficCom RIS-9260 RSU LEO和Kapsch TrafficCom RIS-9160 3.2.0.829.23版本、3.8.0.1119.42版本和4.6.0.1211.28版本存在安全漏洞,该漏洞源于未经验证的EFI shell,可能导致启动过程中执行任意代码或权限提升。
Description (English)
Kapsch TrafficCom RIS-9260 RSU LEO and Kapsch TrafficCom RIS-9160 are all road survey units of Kapsch TrafficCom, Austria, which function as a networked communications and co-management function in intelligent traffic. Kapsch TrafficCom RIS-9260 RSU LEO and Kapsch TrafficCom RIS-9160 3.2.0.829.23 versions, 3.8.0.1119.42 and 4.6.0.1211.28 have security gaps that originate from unverified EFI Shell and may lead to the implementation of any code or upgrade of authority during the start-up process.
Hazard Level
Low
Vulnerability Type
其他
Affected Vendor
Kapsch TrafficCom
Published
2025-08-26
Last Modified
2026-02-24
References
https://www.kapsch.net/en/press/releases/ktc-20200813-pr-en https://www.kapsch.net/_Resources/Persistent/55fb8d0fb279262809eac88d457894db1b3efcd5/Kapsch_RIS-9160_Datasheet_EN.pdf https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf https://phrack.org/issues/72/16_md https://cwe.mitre.org/data/definitions/1233.html https://nvd.nist.gov/vuln/detail/CVE-2025-25734
Share on: