Vulnerabilities

TI-2024-15117 CVE-2024-22727 · GHSA-pq5h-mphr-9wrg

Teltonika TRB1-series devices with firmware before TRB1_R_00.07.05.2 allow attackers to…

LOW 36

Teltonika TRB1-series devices with firmware before TRB1_R_00.07.05.2 allow attackers to exploit a firmware vulnerability via Ethernet LAN or USB.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00328 Published 2024-02-17 No fix listed

TI-2023-15641 CVE-2023-32350 · GHSA-r3cr-jc72-pwfx

OS command injection in Teltonika RUT model routers

MEDIUM 43

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01503 Published 2023-05-22 No fix listed CWE-78

TI-2023-15640 CVE-2023-32349 · GHSA-mgp4-67w5-r388

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump…

MEDIUM 42

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01089 Published 2023-05-22 No fix listed CWE-15

TI-2023-02418 CVE-2023-2588 · GHSA-vrmh-4mwf-2jxm

Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing…

MEDIUM 42

Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’ local secure shell (SSH)/web management services over the cloud proxy.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01121 Published 2023-05-22 Fixed in 4.10.0 CWE-830

TI-2023-02417 CVE-2023-2587 · GHSA-mrcv-35v6-xwxf

Cross-site scripting in Teltonika Remote Management System

MEDIUM 40

Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the main page of the web interface.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00917 Published 2023-05-22 Fixed in 4.10.0 CWE-79

TI-2023-02416 CVE-2023-2586 · GHSA-px38-8qpq-6gcq

Improper authentication in Teltonika Remote Management System

MEDIUM 45

Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously unregistered devices through the RMS platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01023 Published 2023-05-22 Fixed in 4.14.0 CWE-287

TI-2023-15639 CVE-2023-32348 · GHSA-jj25-48fw-gp3v

Server-side request forgery in Teltonika Remote Management System

LOW 33

Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for cross-device communication that uses OpenVPN.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00526 Published 2023-05-22 Fixed in 4.10.0 CWE-918

TI-2023-15638 CVE-2023-32347 · GHSA-3gwj-m7cm-jpgq

Improper authentication in Teltonika Remote Management System

MEDIUM 43

Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for device claiming and from the device perspective for authenticati…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00665 Published 2023-05-22 Fixed in 4.10.0 CWE-287

TI-2023-15637 CVE-2023-32346 · GHSA-pfjx-qrvm-2h2r

Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that…

LOW 31

Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devices.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00544 Published 2023-05-22 Fixed in 4.10.0 CWE-204

TI-2018-14082 CVE-2018-19878 · GHSA-vwc5-x3cm-cc9v

An issue was discovered on Teltonika RTU950 R_31.04.89 devices.

LOW 31

An issue was discovered on Teltonika RTU950 R_31.04.89 devices.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01169 Published 2019-06-19 No fix listed CWE-416

TI-2018-14083 CVE-2018-19879 · GHSA-mc55-hg68-v7m4

An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89…

MEDIUM 45

An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01257 Published 2019-03-28 No fix listed CWE-307

TI-2018-12494 CVE-2018-17534 · GHSA-3gqh-4x39-jr92

Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a…

LOW 31

Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00724 Published 2018-10-15 No fix listed CWE-287

TI-2018-12493 CVE-2018-17533 · GHSA-w6c8-3qrx-3r8h

Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site…

LOW 31

Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01958 Published 2018-10-15 No fix listed CWE-79

TI-2018-12492 CVE-2018-17532 · GHSA-9936-24wm-39mx

Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple…

HIGH 80

Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.70659 Published 2018-10-15 No fix listed CWE-78

TI-2017-05691 CVE-2017-8116 · GHSA-h4g7-w69m-jc5h

The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware…

MEDIUM 49

The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands with root privileges via shell metacharacters in the username…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04519 Published 2017-07-03 No fix listed CWE-78

Vulnerabilities

Filters