Vulnerabilities (CVE)

Filtered by vendor Teltonika-networks Subscribe

CVSS v3 Filter

ALL

NONE (0.0) LOW (0.1 - 3.9) MEDIUM (4.0 - 6.9) HIGH (7.0 - 8.9) CRITICAL (9.0 - 10.0)

Search

Total 6 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2020-5787	1 Teltonika-networks	2 Trb245, Trb245 Firmware	2020-10-01	8.5 HIGH	6.5 MEDIUM
Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action.
CVE-2020-5788	1 Teltonika-networks	2 Trb245, Trb245 Firmware	2020-10-01	8.5 HIGH	6.5 MEDIUM
Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action.
CVE-2020-5785	1 Teltonika-networks	2 Trb245, Trb245 Firmware	2020-10-01	4.3 MEDIUM	6.1 MEDIUM
Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an unauthenticated attacker to conduct reflected cross-site scripting via a crafted ‘action’ or ‘pkg_name’ parameter.
CVE-2020-5784	1 Teltonika-networks	2 Trb245, Trb245 Firmware	2020-10-01	4.0 MEDIUM	6.5 MEDIUM
Server-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user to cause the application to perform HTTP GET requests to arbitrary URLs.
CVE-2020-5789	1 Teltonika-networks	2 Trb245, Trb245 Firmware	2020-10-01	4.0 MEDIUM	6.5 MEDIUM
Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to read the contents of arbitrary files on disk.
CVE-2020-5769	1 Teltonika-networks	2 Gateway Trb245, Gateway Trb245 Firmware	2020-07-22	3.5 LOW	5.4 MEDIUM
Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.02 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by injecting malicious client-side code into the 'URL/ Host / Connection' form in the 'DATA TO SERVER' configuration section.