PT-2020-18708

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote, authenticated attacker to delete arbitrary files on disk. This is achieved via the "admin/services/packages/remove" action, which is vulnerable to Relative Pat...

CVE-2020-5787: Improper Limitation of a Pathname to a Restricted Directory

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action...