Teltonika Command Injection in Backup function
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Teltonika Networks | RUT | unaffected |
|
|||||||||
| Teltonika Networks | RUTX | unaffected |
|
|||||||||
| Teltonika Networks | RUTM | unaffected |
|
|||||||||
| Teltonika Networks | RUTC | unaffected |
|
|||||||||
| Teltonika Networks | ATRM | unaffected |
|
|||||||||
| Teltonika Networks | TAP | unaffected |
|
|||||||||
| Teltonika Networks | CAP | unaffected |
|
|||||||||
| Teltonika Networks | OXA | unaffected |
|
|||||||||
| Teltonika Networks | DAP | unaffected |
|
|||||||||
| Teltonika Networks | TRB | unaffected |
|
|||||||||
| Teltonika Networks | OTD | unaffected |
|
|||||||||
| Teltonika Networks | EBG | unaffected |
|
|||||||||
| Teltonika Networks | SWM | unaffected |
|
|||||||||
| Teltonika Networks | TSW | unaffected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Teltonika-networks | Atrm |
|
||||||||||||
| Teltonika-networks | Cap |
|
||||||||||||
| Teltonika-networks | Dap |
|
||||||||||||
| Teltonika-networks | Ebg |
|
||||||||||||
| Teltonika-networks | Otd |
|
||||||||||||
| Teltonika-networks | Oxa |
|
||||||||||||
| Teltonika-networks | Rut |
|
||||||||||||
| Teltonika-networks | Rutc |
|
||||||||||||
| Teltonika-networks | Rutm |
|
||||||||||||
| Teltonika-networks | Rutx |
|
||||||||||||
| Teltonika-networks | Swm |
|
||||||||||||
| Teltonika-networks | Tap |
|
||||||||||||
| Teltonika-networks | Trb |
|
||||||||||||
| Teltonika-networks | Tsw |
|
Vendor Solution
RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, EBG: update to 7.24.6 or later on the 7.24 branch, or 7.25.2 or later on the 7.25 branch TAP: update to 7.25.2 or later TSW, SWM: update to 1.10.4 or later
No CVSS v3.1
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.939% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Teltonika-networks
Teltonika-networks atrm Teltonika-networks cap Teltonika-networks dap Teltonika-networks ebg Teltonika-networks otd Teltonika-networks oxa Teltonika-networks rut Teltonika-networks rutc Teltonika-networks rutm Teltonika-networks rutx Teltonika-networks swm Teltonika-networks tap Teltonika-networks trb Teltonika-networks tsw |
|
| Vendors & Products |
Teltonika-networks
Teltonika-networks atrm Teltonika-networks cap Teltonika-networks dap Teltonika-networks ebg Teltonika-networks otd Teltonika-networks oxa Teltonika-networks rut Teltonika-networks rutc Teltonika-networks rutm Teltonika-networks rutx Teltonika-networks swm Teltonika-networks tap Teltonika-networks trb Teltonika-networks tsw |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands. | |
| Title | Teltonika Command Injection in Backup function | |
| Weaknesses | CWE-78 | |
| References |
| |
| Metrics |
cvssV4_0
|