CVE-2024-8256
MEDIUM—CVSS v3
—CVSS v2
0.20%
EPSS (exploit probability)
CWE-732CWE
Description
In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources via the API.
Affected routers (7)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch Status |
|---|---|---|---|---|---|
| Teltonika Networks | Teltonika RUT241 | — |
versionStartIncluding=7.0, versionEndExcluding=7.8 | 7.8 | Patched |
| Teltonika Networks | Teltonika RUT360 | — |
versionStartIncluding=7.0, versionEndExcluding=7.8 | 7.8 | Patched |
| Teltonika Networks | Teltonika RUT956 | — |
versionStartIncluding=7.0, versionEndExcluding=7.8 | 7.8 | Patched |
| Teltonika Networks | Teltonika RUTM50 | — |
versionStartIncluding=7.0, versionEndExcluding=7.8 | 7.8 | Patched |
| Teltonika Networks | Teltonika RUTX11 | — |
versionStartIncluding=7.0, versionEndExcluding=7.8 | 7.8 | Patched |
| Teltonika Networks | Teltonika RUTX12 | — |
versionStartIncluding=7.0, versionEndExcluding=7.8 | 7.8 | Patched |
| Teltonika Networks | Teltonika RUTX50 | — |
versionStartIncluding=7.0, versionEndExcluding=7.8 | 7.8 | Patched |