Published: 15/10/2018 Updated: 03/10/2019

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 6.8 | Impact Score: 5.9 | Exploitability Score: 0.9

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Teltonika RUT9XX routers with firmware prior to 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges.

Vulnerable Product	Search on Vulmon	Subscribe to Product
teltonika rut900_firmware
teltonika rut950_firmware
teltonika rut955_firmware

Teltonika RUT9XX routers with firmware before 0004233 provide a root terminal on a serial interface without proper access control This allows attackers with physical access to execute arbitrary commands with root privileges ...

CWE-287 https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180319-02_Teltonika_Incorrect_Access_Control http://seclists.org/fulldisclosure/2018/Oct/28 http://packetstormsecurity.com/files/149779/Teltonika-RUT9XX-Missing-Access-Control-To-UART-Root-Terminal.html https://nvd.nist.gov https://packetstormsecurity.com/files/149779/Teltonika-RUT9XX-Missing-Access-Control-To-UART-Root-Terminal.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-17534

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect