Kapsch's vulnerability profile centers on a niche set of specialized traffic management and enforcement appliances, particularly its RIS-9160 and RIS-9260 product lines and their firmware components. The recurring weaknesses reflect the access-control and hardware-configuration demands of these embedded systems: security-sensitive hardware controls lacking lock-bit protection, improper access control, insecure credential storage, missing authentication for critical functions, and weak password requirements. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Kapsch over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-25737MEDIUM Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure password requirements for its BIOS Supe | Aug 26, 2025 | 6.8 | 23 | NO | NO |
CVE-2025-25736MEDIUM Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge (ADB) pre-installed (/mnt/c3platpersistent/opt/ | Aug 26, 2025 | 6.8 | 23 | NO | NO |
CVE-2025-25734MEDIUM Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discovered to contain an unauthenticated EFI shell which allows at | Aug 26, 2025 | 6.8 | 23 | NO | NO |
CVE-2025-25732MEDIUM Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers t | Aug 26, 2025 | 6.8 | 23 | NO | NO |
CVE-2025-25735MEDIUM Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Protected Range Registers (PRRs), allowing | Aug 26, 2025 | 4.6 | 19 | NO | NO |
Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows physically pr | Aug 26, 2025 | 3.5 | 17 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Kapsch.
Media articles that mention a CVE ID that affects a product developed by Kapsch — matched by CVE ID, not by vendor name.