Vuln 1. Web Service Vulnerbility: Unauthenticated PUT Method Allows Arbitrary File Creation and Overwrite
- CVE : CVE-2025-45586
- The Audi dashcam UTR 2.0 can be controlled via Wi-Fi.
- There is a default password for the Wi-Fi, which is "1234567890".
- A port scan reveals that a total of 9 ports are open. These include ports commonly associated with well-known protocols such as FTP, WEB, and RTFP, along with several other ports that are also open.
https://2barbie.notion.site/2024-Audi-U ... e78732f8b9