CVE-2020-5789

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to read the contents of arbitrary files on disk...

CVE-2020-5788

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action...

CVE-2020-5785

Insufficient output sanitization in Teltonika firmware TRB2R00.02.04.3 allows an unauthenticated attacker to conduct reflected cross-site scripting via a crafted ‘action’ or ‘pkgname’ parameter...

CVE-2020-5784

Server-Side Request Forgery in Teltonika firmware TRB2R00.02.04.3 allows a low privileged user to cause the application to perform HTTP GET requests to arbitrary URLs...

CVE-2020-5787

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action...

CVE-2020-5787

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action...

CVE-2020-5785

Insufficient output sanitization in Teltonika firmware TRB2R00.02.04.3 allows an unauthenticated attacker to conduct reflected cross-site scripting via a crafted ‘action’ or ‘pkgname’ parameter...

PT-2020-18710

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote, authenticated attacker to read the contents of arbitrary files on disk due to a Relative Path Traversal vulnerability in the firmware. Recommendations For...

PT-2020-18709

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote, authenticated attacker to delete arbitrary files on disk. This is achieved via the "admin/system/admin/certificates/delete" API endpoint. Recommendations For...

PT-2020-18705

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a low-privileged user to cause the application to perform HTTP GET requests to arbitrary URLs, which is a result of a Server-Side Request Forgery in the firmware...

PT-2020-18707

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link. This is achieved through cross-site request forgery...

PT-2020-18708

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote, authenticated attacker to delete arbitrary files on disk. This is achieved via the "admin/services/packages/remove" action, which is vulnerable to Relative Pat...

PT-2020-18706

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue is related to insufficient output sanitization, which allows an unauthenticated attacker to conduct reflected cross-site scripting. This can be achieved via a crafted action or...

CVE-2020-5773

Improper Access Control in Teltonika firmware TRB2R00.02.04.01 allows a low privileged user to perform unauthorized write operations...

CVE-2020-5770

Cross-site request forgery in Teltonika firmware TRB2R00.02.04.01 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

CVE-2020-5771

Improper Input Validation in Teltonika firmware TRB2R00.02.04.01 allows a remote, authenticated attacker to gain root privileges by uploading a malicious backup archive...

CVE-2020-5772

Improper Input Validation in Teltonika firmware TRB2R00.02.04.01 allows a remote, authenticated attacker to gain root privileges by uploading a malicious package file...

PT-2020-18694

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.01 Description The issue is related to improper access control, allowing a low-privileged user to perform unauthorized write operations. Recommendations For Teltonika firmware version TRB2 R...

PT-2020-18692

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.01 Description The issue is related to improper input validation, allowing a remote, authenticated attacker to gain root privileges. This can be achieved by uploading a malicious backup archive...

PT-2020-18691

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.01 Description The issue allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link, due to cross-site request forgery in the firmware...