CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2024-8256 – Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches
https://notcve.org/view.php?id=CVE-2024-8256
10 Dec 2024 — In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources via the API. • https://www.deepcove.support/teltonika-responsible-disclosure-proactive-testing-report • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 9.0EPSS: 0%CPEs: 36EXPL: 0CVE-2023-32350
https://notcve.org/view.php?id=CVE-2023-32350
22 May 2023 — Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a malicious name that contains an OS command injection payload. • https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 36EXPL: 0CVE-2023-32349
https://notcve.org/view.php?id=CVE-2023-32349
22 May 2023 — Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, which could result in arbitrary code execution. • https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08 • CWE-15: External Control of System or Configuration Setting •
CVSS: 8.5EPSS: 0%CPEs: 2EXPL: 1CVE-2020-5788
https://notcve.org/view.php?id=CVE-2020-5788
01 Oct 2020 — Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action. Un Salto de Ruta Relativa en el firmware de Teltonika versión TRB2_R_00.02.04.3, permite a un atacante autenticado y remoto eliminar archivos arbitrarios en el disco por medio de la acción admin/system/admin/certificate/delete • https://www.tenable.com/security/research/tra-2020-57 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 8.5EPSS: 0%CPEs: 2EXPL: 1CVE-2020-5787
https://notcve.org/view.php?id=CVE-2020-5787
01 Oct 2020 — Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action. Un Salto de Ruta Relativa en el firmware de Teltonika versión TRB2_R_00.02.04.3, permite a un atacante autenticado y remoto eliminar archivos arbitrarios en el disco por medio de la acción admin/services/packages/remove • https://www.tenable.com/security/research/tra-2020-57 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 1CVE-2020-5785
https://notcve.org/view.php?id=CVE-2020-5785
01 Oct 2020 — Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an unauthenticated attacker to conduct reflected cross-site scripting via a crafted ‘action’ or ‘pkg_name’ parameter. Un saneamiento de salida insuficiente en el firmware de Teltonika TRB2_R_00.02.04.3, permite a un atacante no autenticado llevar a cabo un ataque de tipo cross-site scripting por medio del parámetro "action" o "pkg_name" diseñado • https://www.tenable.com/security/research/tra-2020-57 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 1CVE-2020-5786
https://notcve.org/view.php?id=CVE-2020-5786
01 Oct 2020 — Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link. Una Vulnerabilidad de tipo Cross-site request forgery en el firmware de Teltonika TRB2_R_00.02.04.3, permite a un atacante remoto llevar a cabo acciones sensibles de aplicación al engañar a los usuarios legítimos para que hagan clic en un enlace diseñado • https://www.tenable.com/security/research/tra-2020-57 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2020-5789
https://notcve.org/view.php?id=CVE-2020-5789
01 Oct 2020 — Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to read the contents of arbitrary files on disk. Un Salto de Ruta Relativa en el firmware de Teltonika versión TRB2_R_00.02.04.3, permite a un atacante autenticado y remoto leer el contenido de archivos arbitrarios en el disco • https://www.tenable.com/security/research/tra-2020-57 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2020-5784
https://notcve.org/view.php?id=CVE-2020-5784
01 Oct 2020 — Server-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user to cause the application to perform HTTP GET requests to arbitrary URLs. Una vulnerabilidad de tipo Server-Side Request Forgery en el firmware de Teltonika TRB2_R_00.02.04.3, permite a un usuario poco privilegiado causar que la aplicación lleve a cabo peticiones GET HTTP hacia unas URL arbitraria • https://www.tenable.com/security/research/tra-2020-57 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2020-5771
https://notcve.org/view.php?id=CVE-2020-5771
03 Aug 2020 — Improper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated attacker to gain root privileges by uploading a malicious backup archive. Una Comprobación de Entrada Inapropiada en Teltonika versión de firmware TRB2_R_00.02.04.01, permite a un atacante remoto autenticado alcanzar privilegios root mediante la carga de un archivo de respaldo malicioso • https://www.tenable.com/security/research/tra-2020-48 • CWE-20: Improper Input Validation •