Read the docs

Teltonika

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Teltonika records in CISA KEV

No Teltonika vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Remote Management System · all components

Priority MEDIUM 45

Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously unregistered devices through the RMS platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01023 Published 2023-05-22 Fixed in 4.14.0 CWE-287
Priority MEDIUM 43

Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for device claiming and from the device perspective for authenticati…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00665 Published 2023-05-22 Fixed in 4.10.0 CWE-287
Priority MEDIUM 40

Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the main page of the web interface.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00917 Published 2023-05-22 Fixed in 4.10.0 CWE-79
Priority LOW 33

Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for cross-device communication that uses OpenVPN.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00526 Published 2023-05-22 Fixed in 4.10.0 CWE-918
Open these records in search →