PT-2020-18709

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote, authenticated attacker to delete arbitrary files on disk. This is achieved via the "admin/system/admin/certificates/delete" API endpoint. Recommendations For...

CVE-2020-5788: Improper Limitation of a Pathname to a Restricted Directory

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action...