cve.bz

CVE-2025-25733

3.5 lowEPSS 0.3%

Low (3.5) in kapsch. EPSS 0.3% chance of exploitation in the next 30 days.

Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows physically proximate attackers to arbitrarily modify SPI flash regions, leading to a degradation of the security posture of the device.

Severity

CVSS 3.1

3.5 low
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE
CWE-1233
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON