Teltonika RUT9XX OS Command Injection Vulnerability

Teltonika RUT9XX routers also known as LuCI is a router product from the Lithuanian company Teltonika. An OS command injection vulnerability exists in autologin.cgi and hotspotlogin.cgi in Teltonika RUT9XX with firmware versions lower than 00.04.233, which can be exploited by remote attackers to...

CVE-2018-17534

Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges...