CVE-2025-25736

Name of the Vulnerable Software and Affected Versions: Kapsch TrafficCom RIS-9260 RSU LEO versions 3.2.0.829.23, 3.8.0.1119.42, and 4.6.0.1211.28

Description: The Kapsch TrafficCom RIS-9260 RSU LEO software has the Android Debug Bridge (ADB) pre-installed and enabled by default. This allows unauthenticated root shell access to the cellular modem via the default kapsch user. The ADB is located at /mnt/c3platpersistent/opt/platform-tools/adb.

Recommendations: Disable the Android Debug Bridge (ADB) on versions 3.2.0.829.23, 3.8.0.1119.42, and 4.6.0.1211.28. Restrict access to the /mnt/c3platpersistent/opt/platform-tools/adb directory. Change the default kapsch user password.