Teltonika
9 CVEs across 21 Teltonika products. Browse Teltonika vulnerabilities, severities, and proof-of-concept exploits.
Teltonika products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-22727 | High | 8.3 | 2024-02-17 | Teltonika TRB1-series devices with firmware before TRB1_R_00.07.05.2 allow attackers to exploit a firmware vulnerability via Ethernet LAN or USB. |
CVE-2023-32350 | High | 8.0 | 2023-05-22 | Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An at… |
CVE-2023-32349 | High | 8.0 | 2023-05-22 | Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However… |
CVE-2023-32348 | Medium | 5.8 | 2023-05-22 | Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for cross-device communication that uses Ope… |
CVE-2023-2588 | High | 8.8 | 2023-05-22 | Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’ local secure shell (SSH)/web management… |
CVE-2023-2587 | High | 7.5 | 2023-05-22 | Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the main page of the web interface. An att… |
CVE-2023-2586 | Critical | 9.0 | 2023-05-22 | Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously unregistered devices through the RMS pla… |
CVE-2023-32347 | High | 8.1 | 2023-05-22 | Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for de… |
CVE-2023-32346 | Medium | 5.3 | 2023-05-22 | Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devices. This function returns information b… |
CVE-2018-19878 | Medium | 6.5 | 2019-06-19 | An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitation. For every successful login request… |
CVE-2018-19879 | High | 7.1 | 2019-03-28 | An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices. The authentication functionality is not pro… |
CVE-2018-17534 | Medium | 6.8 | 2018-10-15 | Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with… |
CVE-2018-17533 | Medium | 6.1 | 2018-10-15 | Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input s… |
CVE-2018-17532 | Critical | 9.8 | 2018-10-15 | Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspot… |
CVE-2017-8116 | Critical | 9.8 | 2017-07-03 | The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands… |