CVE-2025-2555

CVE-2025-2555 describes a problematic vulnerability in the Audi Universal Traffic Recorder App 2.0, specifically within an unknown function of its FTP Credentials component. This flaw involves the use of a hard-coded password, which can be exploited locally. The vulnerability has a low CVSS score of 2.9, indicating a low severity. While the attack requires local access and is considered to have high complexity and difficult exploitability, a successful exploit could lead to low confidentiality impact. The exploit has been publicly disclosed, but there is no evidence of active exploitation, Metasploit modules, Nuclei templates, or ExploitDB entries. Community discussion and media coverage are also minimal, suggesting low current attention.