Teltonika RUT9XX Cross-Site Scripting Vulnerability

Teltonika RUT9XX routers also known as LuCI is a router product from the Lithuanian company Teltonika. A cross-site scripting vulnerability exists in hotspotlogin.cgi in Teltonika RUT9XX with firmware version lower than 00.05.01.1, which can be exploited by attackers to conduct cross-site scripti...

Teltonika RUT9XX OS Command Injection Vulnerability

Teltonika RUT9XX routers also known as LuCI is a router product from the Lithuanian company Teltonika. An OS command injection vulnerability exists in autologin.cgi and hotspotlogin.cgi in Teltonika RUT9XX with firmware versions lower than 00.04.233, which can be exploited by remote attackers to...

CVE-2018-17533

Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization...

CVE-2018-17532

Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges...

Cross site scripting

Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization...

CVE-2018-17533

Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization...

CVE-2018-17532

Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges...

Teltonika RUT9XX Reflected Cross Site Scripting Vulnerability

Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization. Teltonika RUT9XX Reflected Cross-Site Scripting XSS Link:...

Teltonika RUT9XX Unauthenticated OS Command Injection

Teltonika RUT9XX Unauthenticated OS Command Injection Link: https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180319-01TeltonikaOSCommandInjection Vulnerability Overview Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command...