Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-8256

Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tlt_net

Description

In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources via the API.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Teltonika Networks RUTOS

Default version status: unaffected

  • 7.0 to < 7.8affected

Teltonika Networks TSWOS

Default version status: unaffected

  • 1.0 to < 1.3affected

References