← Database

CVE-2025-25734

MEDIUM CVSS: 6.8 Published: 2025-08-26 Modified: 2026-06-17

Description

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discovered to contain an unauthenticated EFI shell which allows attackers to execute arbitrary code or escalate privileges during the boot process.

Affected Platforms

Kapsch Ris-9260Kapsch Ris-9160Kapsch Ris-9260 FirmwareKapsch Ris-9160 Firmware

Weakness Type

CWE-284, CWE-1233

References