What is CVE-2018-19879?

CVE-2018-19879 is a high-severity vulnerability in Teltonika Rut950, classified under Improper Restriction of Excessive Authentication Attempts. CVSS score: 7.1/10. Published 2019-03-28.

How severe is CVE-2018-19879?

High severity. CVSS v3 base score is 7.1 out of 10.

Vulnerability in Teltonika Rut950

CVE-2018-19879

An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices. The authentication functionality is not protected from automated tools used to make login attempts to the application. An anonymous attacker has the ability to make unlimited login attempts with an automated tool. This ability could lead to cracking a targeted user's password.

Published 2019-03-28 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L.

EPSS exploit prediction

EPSS: 0.013 (68.4th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 68th percentile — 68.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000

Affected products

Teltonika Rut950
Teltonika Rut950 Firmware — versions r_31.04.89

Weakness classification (CWE)

CWE-307 — Improper Restriction of Excessive Authentication Attempts

References

wiki.teltonika.lt/index.php (Vendor Advisory)
www.triadsec.com/CVE-2018-19879.pdf (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2018-19879?: CVE-2018-19879 is a high-severity vulnerability in Teltonika Rut950, classified under Improper Restriction of Excessive Authentication Attempts. CVSS score: 7.1/10. Published 2019-03-28.
How severe is CVE-2018-19879?: High severity. CVSS v3 base score is 7.1 out of 10.