CVE-2018-17533 Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization.
MediumCVSS 6.1
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teltonika rut900 firmware | < 00.05.01.1 | 00.05.01.1 |
| teltonika rut950 firmware | < 00.05.01.1 | 00.05.01.1 |
| teltonika rut955 firmware | < 00.05.01.1 | 00.05.01.1 |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20181011 [SBA-ADV-20180410-01] CVE-2018-17533: Teltonika RUT9XX Reflected Cross-Site Scripting (XSS) exploit mailing-list third-party-advisory
- github.com exploit third-party-advisory