Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior

Críticas / altas1403▲ 41 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-17534	Modificada	Media (6.8)	0.72%	—	Teltonika Rut900 Firmware Teltonika Rut950 Firmware Teltonika Rut955 Firmware	15/10/2018	17/6/2026	Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges.
CVE-2018-17533	Modificada	Media (6.1)	2.0%	—	Teltonika Rut900 Firmware Teltonika Rut950 Firmware Teltonika Rut955 Firmware	15/10/2018	17/6/2026	Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization.
CVE-2018-17532	Modificada	Crítica (9.8)	71%	—	Teltonika Rut900 Firmware Teltonika Rut950 Firmware Teltonika Rut955 Firmware	15/10/2018	17/6/2026	Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges.
CVE-2017-8116	Modificada	Crítica (9.8)	4.5%	—	Teltonika Rut900 Firmware Teltonika Rut905 Firmware Teltonika Rut950 Firmware Teltonika Rut955 Firmware	3/7/2017	17/6/2026	The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands with root privileges via shell metacharacters in the username parameter in a login request.