Vulnerabilities in Teltonika

8 results
Vexday analysis

Teltonika possui 8 vulnerabilidades registradas, com 1 classificada como crítica, porém nenhuma sob exploração ativa conhecida no momento. A fraqueza dominante está relacionada a autenticação (CWE-287), indicando problemas em mecanismos de controle de acesso. O risco atual é contido pela ausência de ataques em massa, mas a vulnerabilidade crítica demanda atenção imediata na gestão de patches.

CVE-2023-32350HIGH Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in aEPSS 1.5%CVE-2023-2588HIGH Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’ local secure shell (EPSS 1.1%CVE-2023-2586CRITICAL Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously unregistered devices EPSS 1.0%CVE-2023-32349HIGH Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter paEPSS 1.0%CVE-2023-2587HIGH Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the main page of the weEPSS 0.9%CVE-2023-32347HIGH Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the userEPSS 0.7%CVE-2023-32346MEDIUM Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devices. This function reEPSS 0.5%CVE-2023-32348MEDIUM Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for cross-device communicEPSS 0.5%