The vulnerability of the autologin.cgi and hotspotlogin.cgi scripts of Teltonika’s RUT955 router software allows a hacker to execute arbitrary commands with root privileges.

The vulnerabilities of the autologin.cgi and hotspotlogin.cgi scripts in Teltonika’s RUT955 router microprogramming software exist due to the lack of measures to neutralize these special elements. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary commands with root...