https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-45587.htmlhttps://patchthecve.com/cve/CVE-2025-45587.htmlWed, 17 Jun 2026 09:25:35 +0000HIGH 7.0: A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.https://patchthecve.com/cve/CVE-2025-45586.htmlhttps://patchthecve.com/cve/CVE-2025-45586.htmlWed, 17 Jun 2026 09:25:35 +0000HIGH 7.5: An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.https://patchthecve.com/cve/CVE-2025-45585.htmlhttps://patchthecve.com/cve/CVE-2025-45585.htmlWed, 17 Jun 2026 09:25:35 +0000MEDIUM 5.4: Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the wifi_sta_ssid or wifi_ap_ssid parameters.https://patchthecve.com/cve/CVE-2025-45584.htmlhttps://patchthecve.com/cve/CVE-2025-45584.htmlWed, 17 Jun 2026 09:25:35 +0000HIGH 7.5: Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information without authentication.https://patchthecve.com/cve/CVE-2025-45583.htmlhttps://patchthecve.com/cve/CVE-2025-45583.htmlWed, 17 Jun 2026 09:25:35 +0000CRITICAL 9.1: Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username and password.