# ATI Fleet Management System exposes credentials via unauthenticated access

Published: 2025-06-10 · Severity: routine · Sectors: transportation
Canonical: https://vorant.io/reports/4c4ea617-6a9c-53ee-b65e-553351d3537d/ati-fleet-management-system-exposes-credentials-via-unauthenticated-access

> Unauthenticated attacker can retrieve sensitive system information and administrative credentials from ATI Fleet Management System before February 6, 2025.

Assured Telematics Inc's Fleet Management System contains an information disclosure vulnerability (CVE-2025-4364) that allows unauthenticated remote attackers with low attack complexity to access sensitive file system information and obtain administrative credentials. The vulnerability is assigned CVSS v3 7.5 and CVSS v4 8.7 scores. Affected are all versions of the Fleet Management System prior to February 6, 2025. The system is deployed worldwide in transportation infrastructure.

No known public exploitation has been reported to CISA as of the advisory date. Assured Telematics has issued a fix; organizations using affected versions should upgrade immediately. CISA recommends minimizing network exposure by ensuring fleet management devices are not directly internet-accessible, locating them behind firewalls isolated from business networks, and using VPNs for required remote access. This is a transportation-sector targeting advisory affecting critical infrastructure globally.

## Mentioned in this report

- Vulnerabilities: CVE-2025-4364

Source reporting: https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-11

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/4c4ea617-6a9c-53ee-b65e-553351d3537d/ati-fleet-management-system-exposes-credentials-via-unauthenticated-access.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup