Lucene search
K

14 matches found

Positive Technologies
Positive Technologies
added 2026/06/05 12:0 a.m.17 views

PT-2026-46930

In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perform command injection as the root user...

8.4CVSS5.5AI score0.00541EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-16370

Malicious code in bioql PyPI...

7.2CVSS6.6AI score0.00387EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-49594

Malicious code in bioql PyPI...

5.9CVSS6.6AI score0.00188EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/31 9:35 a.m.16 views

CVE-2025-4687

In Teltonika Networks Remote Management System RMS, it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the attackers company without their knowledge. The victims account a...

7.2CVSS7AI score0.00387EPSS
Exploits0References1
NVD
NVD
added 2025/05/29 9:15 a.m.32 views

CVE-2025-4687

In Teltonika Networks Remote Management System RMS, it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the attackers company without their knowledge. The victims account a...

7.2CVSS0.00387EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/29 8:59 a.m.9 views

CVE-2025-4687 Account pre-hijacking through invite misuse

In Teltonika Networks Remote Management System RMS, it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the attackers company without their knowledge. The victims account a...

7.2CVSS7.2AI score0.00387EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/29 8:59 a.m.32 views

CVE-2025-4687 Account pre-hijacking through invite misuse

In Teltonika Networks Remote Management System RMS, it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the attackers company without their knowledge. The victims account a...

7.2CVSS0.00387EPSS
Exploits0References1
CVE
CVE
added 2025/05/29 8:59 a.m.70 views

CVE-2025-4687

CVE-2025-4687 affects Teltonika Networks Remote Management System (RMS) prior to 5.7. The issue allows account pre-hijacking via misuse of the invite feature: if a user has a pending invite and registers directly, they are added to the attacker’s company, enabling the attacker to manage the victi...

7.2CVSS7AI score0.00387EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/29 12:0 a.m.8 views

PT-2025-23147 · Teltonika Networks · Teltonika Networks Rms

Name of the Vulnerable Software and Affected Versions: Teltonika Networks Remote Management System RMS versions prior to 5.7 Description: The issue allows for account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they...

7.2CVSS6.5AI score0.00387EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/05/23 6:51 a.m.7 views

CVE-2024-8256

In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 excluding and TSWOS devices running on versions 1.0 to 1.3 excluding, due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources v...

5.9CVSS6.9AI score0.00188EPSS
Exploits0References1
NVD
NVD
added 2024/12/10 9:15 a.m.28 views

CVE-2024-8256

In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 excluding and TSWOS devices running on versions 1.0 to 1.3 excluding, due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources v...

5.9CVSS0.00188EPSS
Exploits0References1
CVE
CVE
added 2024/12/10 8:56 a.m.94 views

CVE-2024-8256

CVE-2024-8256 affects Teltonika Networks RUTOS and TSWOS devices due to incorrect permission handling in the API, enabling a lower-privileged user with default permissions to access critical device resources. Affected: RUTOS versions 7.0–7.7/7.8 exclusion (per PT-2024-38894 and CVE docs) and TSWO...

5.9CVSS6.5AI score0.00188EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/10 12:0 a.m.5 views

PT-2024-38894 · Teltonika Networks · Tswos +1

Name of the Vulnerable Software and Affected Versions: Teltonika Networks RUTOS versions 7.0 through 7.7 Teltonika Networks TSWOS versions 1.0 through 1.2 Description: A vulnerability exists due to incorrect permission handling, allowing a lower privileged user with default permissions to access...

5.9CVSS7.2AI score0.00188EPSS
Exploits0References6
The Hacker News
The Hacker News
added 2023/05/15 1:24 p.m.4 views

Industrial Cellular Routers at Risk: 11 New Vulnerabilities Expose OT Networks

Several security vulnerabilities have been disclosed in cloud management platforms associated with three industrial cellular router vendors that could expose operational technology OT networks to external attacks. The findings were presented by Israeli industrial cybersecurity firm OTORIO at the...

10CVSS9.2AI score0.01638EPSS
Exploits0
Rows per page
Query Builder