Teltonika Rut950_firmware
6 CVEs affecting Teltonika Rut950_firmware. Latest disclosed: 2019-06-19. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-17532 | Critical | 9.8 | 2018-10-15 | Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspot… |
CVE-2017-8116 | Critical | 9.8 | 2017-07-03 | The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands… |
CVE-2018-19879 | High | 7.1 | 2019-03-28 | An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices. The authentication functionality is not pro… |
CVE-2018-17534 | Medium | 6.8 | 2018-10-15 | Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with… |
CVE-2018-19878 | Medium | 6.5 | 2019-06-19 | An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitation. For every successful login request… |
CVE-2018-17533 | Medium | 6.1 | 2018-10-15 | Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input s… |