We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-2556

Audi UTR Dashcam Video Stream hard-coded credentials



Description

EN DE

A vulnerability classified as problematic was found in Audi UTR Dashcam 2.0. Affected by this vulnerability is an unknown functionality of the component Video Stream Handler. The manipulation leads to hard-coded credentials. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. Upgrading to version 2.89 and 2.90 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about these issues and acted very professional. Version 2.89 is fixing this issue for new customers and 2.90 is going to fix it for existing customers.

In Audi UTR Dashcam 2.0 wurde eine problematische Schwachstelle entdeckt. Hierbei betrifft es unbekannten Programmcode der Komponente Video Stream Handler. Dank Manipulation mit unbekannten Daten kann eine hard-coded credentials-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff im lokalen Netzwerk. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 2.89 and 2.90 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.

Reserved 2025-03-20 | Published 2025-03-20 | Updated 2025-03-20 | Assigner VulDB


MEDIUM: 5.3CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
MEDIUM: 4.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
MEDIUM: 4.3CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.3AV:A/AC:L/Au:N/C:P/I:N/A:N

Problem types

Hard-coded Credentials

Use of Hard-coded Password

Product status

2.0
affected

Timeline

2025-03-20:Advisory disclosed
2025-03-20:VulDB entry created
2025-03-20:VulDB entry last update

Credits

geochen (VulDB User) reporter

References

vuldb.com/?id.300169 (VDB-300169 | Audi UTR Dashcam Video Stream hard-coded credentials) vdb-entry

vuldb.com/?ctiid.300169 (VDB-300169 | CTI Indicators (IOB, IOC, TTP)) signature permissions-required

vuldb.com/?submit.513392 (Submit #513392 | Audi UTR Dashcam 2.0 File and Directory Information Exposure) third-party-advisory

github.com/geo-chen/Audi/blob/main/README.md exploit

cve.org (CVE-2025-2556)

nvd.nist.gov (CVE-2025-2556)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-2556

Support options

Helpdesk Chat, Email, Knowledgebase