Teltonika TRB245 Cross-Site Request Forgery Vulnerability

Teltonika TRB245 is a cellular network gateway product from Teltonika Lithuania. A cross-site request forgery vulnerability exists in the firmware TRB2R00.02.04.01 of Teltonika TRB245. An attacker can exploit the vulnerability to perform a number of sensitive operations with the help of specially...

Teltonika TRB245 Improper Access Control Vulnerability

Teltonika TRB245 is a cellular network gateway product from Teltonika Lithuania. An improper access control vulnerability exists in firmware TRB2R00.02.04.01 of the Teltonika TRB245. The vulnerability stems from improper access control. An attacker could exploit the vulnerability to perform...

Cross site request forgery (csrf)

Cross-site request forgery in Teltonika firmware TRB2R00.02.04.01 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

CVE-2020-5770

CVE-2020-5770 describes a Cross-Site Request Forgery in Teltonika firmware TRB2_R_00.02.04.01 (Teltonika TRB245 platform). The CSRF flaw allows a remote attacker to cause a logged-in user to perform sensitive actions by clicking a crafted link, leveraging the user’s authenticated session. Documen...

CVE-2020-5770

Cross-site request forgery in Teltonika firmware TRB2R00.02.04.01 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

CVE-2020-5773: Improper Privilege Management

Improper Access Control in Teltonika firmware TRB2R00.02.04.01 allows a low privileged user to perform unauthorized write operations...

CVE-2020-5771: Improper Input Validation

Improper Input Validation in Teltonika firmware TRB2R00.02.04.01 allows a remote, authenticated attacker to gain root privileges by uploading a malicious backup archive...

CVE-2020-5772: Download of Code Without Integrity Check

Improper Input Validation in Teltonika firmware TRB2R00.02.04.01 allows a remote, authenticated attacker to gain root privileges by uploading a malicious package file...