← Back

Rut900 Firmware

rut900_firmware

Vendor: Teltonika • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-17534
1Teltonika
3Rut900 Firmware
Rut950 FirmwareRut955 Firmware
Nov 21, 2024
Oct 15, 2018
N/A· v4
6.8 MEDIUM· v3
7.2 HIGH· v2
Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root priv...Show more
Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges.Show less
CVE-2018-17533
1Teltonika
3Rut900 Firmware
Rut950 FirmwareRut955 Firmware
Nov 21, 2024
Oct 15, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization.
CVE-2018-17532
1Teltonika
3Rut900 Firmware
Rut950 FirmwareRut955 Firmware
Nov 21, 2024
Oct 15, 2018
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This a...Show more
Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges.Show less
CVE-2017-8116
1Teltonika
4Rut900 Firmware
Rut905 FirmwareRut950 Firmware+1 more
May 13, 2026
Jul 3, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands with root privileges via shell metacharacters in the username...Show more
The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands with root privileges via shell metacharacters in the username parameter in a login request.Show less