漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for device claiming and from the device perspective for authentication. If an attacker obtained the serial number and MAC address of a device, they could authenticate as that device and steal communication credentials of the device. This could allow an attacker to enable arbitrary command execution as root by utilizing management options within the newly registered devices.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H
Vulnerability Type
认证机制不恰当
Vulnerability Title
Teltonika Remote Management System 授权问题漏洞
Vulnerability Description
Teltonika Remote Management System是Teltonika公司的一个远程管理系统，用于管理Teltonika产品。 Teltonika Remote Management System 4.10.0之前版本存在授权问题漏洞。攻击者利用该漏洞通过利用新注册设备中的管理选项以 root 身份执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A