Read the docs

Teltonika

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Teltonika records in CISA KEV

No Teltonika vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Rut955 Firmware · all components

Priority HIGH 80

Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.70659 Published 2018-10-15 No fix listed CWE-78
Priority MEDIUM 49

The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands with root privileges via shell metacharacters in the username…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04519 Published 2017-07-03 No fix listed CWE-78
Open these records in search →