Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously unregistered devices through the RMS platform. If the user has not disabled the "RMS management feature" enabled by default, then an attacker could register that device to themselves. This could enable the attacker to perform different operations on the user's devices, including remote code execution with 'root' privileges (using the 'Task Manager' feature on RMS).
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
认证机制不恰当
Vulnerability Title
Teltonika Remote Management System 授权问题漏洞
Vulnerability Description
Teltonika Remote Management System是Teltonika公司的一个远程管理系统,用于管理Teltonika产品。 Teltonika Remote Management System 4.14.0之前版本存在授权问题漏洞,该漏洞源于不正确的身份验证,攻击者利用该漏洞可以在用户设备上以Root权限远程执行代码。
CVSS Information
N/A
Vulnerability Type
N/A