Security Advisory

CVE-2025-25736

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-26 00:00:00
Last updated 2025-10-22 14:57:06
Assigner mitre
State PUBLISHED

Description

Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge (ADB) pre-installed (/mnt/c3platpersistent/opt/platform-tools/adb) and enabled by default, allowing unauthenticated root shell access to the cellular modem via the default kapsch user.