Teltonika機器で認証なしのコマンド実行、修正版あり
Summary
Teltonika NetworksのRUTOS 7.22〜7.24.2とTSWOS 1.9〜1.10に、認証なしでOSコマンドを実行されるおそれのある脆弱性が見つかりました。該当機器はベンダーの告知で修正版を確認して更新し、管理画面に届く範囲を絞ってください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
Teltonika NetworksのRUTOS 7.22〜7.24.2とTSWOS 1.9〜1.10に、認証なしでOSコマンドを実行されるおそれのある脆弱性が見つかりました。該当機器はベンダーの告知で修正版を確認して更新し、管理画面に届く範囲を絞ってください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Teltonika Networks | RUT |
7.22 – 7.24.2 |
— |
| Teltonika Networks | RUTX |
7.22 – 7.24.2 |
— |
| Teltonika Networks | RUTM |
7.22 – 7.24.2 |
— |
| Teltonika Networks | RUTC |
7.22 – 7.24.2 |
— |
| Teltonika Networks | ATRM |
7.22 – 7.24.2 |
— |
| Teltonika Networks | TAP |
7.22 – 7.24.2 |
— |
| Teltonika Networks | CAP |
7.22 – 7.24.2 |
— |
| Teltonika Networks | OXA |
7.22 – 7.24.2 |
— |
| Teltonika Networks | DAP |
7.22 – 7.24.2 |
— |
| Teltonika Networks | TRB |
7.22 – 7.24.2 |
— |
| Teltonika Networks | OTD |
7.22 – 7.24.2 |
— |
| Teltonika Networks | EBG |
7.22 – 7.24.2 |
— |
| Teltonika Networks | SWM |
1.9 – 1.10 |
— |
| Teltonika Networks | TSW |
1.9 – 1.10 |
— |
Original description The description as published by the source.
In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.
This issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web teltonika-networks.com
- web nvd.nist.gov
- web github.com