cve.bz

CVE-2025-25734

6.8 mediumEPSS 0.4%

Medium (6.8) in kapsch. EPSS 0.4% chance of exploitation in the next 30 days.

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discovered to contain an unauthenticated EFI shell which allows attackers to execute arbitrary code or escalate privileges during the boot process.

Severity

CVSS 3.1

6.8 medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWEs
CWE-284, CWE-1233
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON