Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Teltonika Component: Remote Management System Clear all filters
TI-2023-02417 CVE-2023-2587 · GHSA-mrcv-35v6-xwxf

Cross-site scripting in Teltonika Remote Management System

Priority MEDIUM 40

Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the main page of the web interface.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00917 Published 2023-05-22 Fixed in 4.10.0 CWE-79
TI-2023-02416 CVE-2023-2586 · GHSA-px38-8qpq-6gcq

Improper authentication in Teltonika Remote Management System

Priority MEDIUM 45

Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously unregistered devices through the RMS platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01023 Published 2023-05-22 Fixed in 4.14.0 CWE-287
TI-2023-15639 CVE-2023-32348 · GHSA-jj25-48fw-gp3v

Server-side request forgery in Teltonika Remote Management System

Priority LOW 33

Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for cross-device communication that uses OpenVPN.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00526 Published 2023-05-22 Fixed in 4.10.0 CWE-918
TI-2023-15638 CVE-2023-32347 · GHSA-3gwj-m7cm-jpgq

Improper authentication in Teltonika Remote Management System

Priority MEDIUM 43

Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for device claiming and from the device perspective for authenticati…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00665 Published 2023-05-22 Fixed in 4.10.0 CWE-287