CVE-2018-17534 Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with physical access to execute arbitrary com...
MediumCVSS 6.8
EPSS 0.72%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teltonika rut900 firmware | < 00.04.233 | 00.04.233 |
| teltonika rut950 firmware | < 00.04.233 | 00.04.233 |
| teltonika rut955 firmware | < 00.04.233 | 00.04.233 |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20181011 [SBA-ADV-20180319-02] CVE-2018-17534: Teltonika RUT9XX Missing Access Control to UART Root Terminal exploit mailing-list third-party-advisory
- github.com exploit third-party-advisory