The vulnerability of the autologin.cgi and hotspotlogin.cgi scripts of Teltonika’s RUT955 router software allows a hacker to execute arbitrary commands with root privileges.

The vulnerabilities of the autologin.cgi and hotspotlogin.cgi scripts in Teltonika’s RUT955 router microprogramming software exist due to the lack of measures to neutralize these special elements. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary commands with root...

Teltonika RUT9XX Unauthenticated OS Command Injection Exploit

Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges...

Teltonika RUT9XX Unauthenticated OS Command Injection

Teltonika RUT9XX Unauthenticated OS Command Injection Link: https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180319-01TeltonikaOSCommandInjection Vulnerability Overview Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command...