rts vulnerabilities

Products

• VLink Virtual Matrix Software 2
• rtsinfo 1

Latest rts CVEs

Newest publication first

1. CVE-2025-29902 Remote code execution that allows unauthorized users to execute arbitrary code on the server machine.

   Published 2025-06-13

   Critical·CVSS 10.0 EPSS 1.2%

   Remote code execution that allows unauthorized users to execute arbitrary code on the server machine.

2. CVE-2023-34999 A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (< 5.7.6) and v6 (< 6.5.0) that allows an attacker to perform arbitrary code execution via the admin web inter...

   Published 2023-09-18

   High·CVSS 7.2 EPSS 1.2%

   A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (< 5.7.6) and v6 (< 6.5.0) that allows an attacker to perform arbitrary code execution via the admin web interface.

3. CVE-2014-7434 The RTSinfo (aka ch.rts.rtsinfo) application 1.4.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive infor...

   Published 2014-10-19

   Medium·CVSS 5.4 EPSS 0.29%

   The RTSinfo (aka ch.rts.rtsinfo) application 1.4.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.