Description
Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Teltonika Networks RUT
Default version status: unaffected
7.22 to < 7.24.6affected
Teltonika Networks RUTX
Default version status: unaffected
7.22 to < 7.24.6affected7.22 to < 7.25.2affected
Teltonika Networks RUTM
Default version status: unaffected
7.22 to < 7.24.6affected7.22 to < 7.25.2affected
Teltonika Networks RUTC
Default version status: unaffected
7.22 to < 7.24.6affected
Teltonika Networks ATRM
Default version status: unaffected
7.22 to < 7.24.6affected
Teltonika Networks TAP
Default version status: unaffected
7.22 to < 7.25.2affected
Teltonika Networks CAP
Default version status: unaffected
7.22 to < 7.24.6affected
Teltonika Networks OXA
Default version status: unaffected
7.22 to < 7.24.6affected
Teltonika Networks DAP
Default version status: unaffected
7.22 to < 7.24.6affected
Teltonika Networks TRB
Default version status: unaffected
7.22 to < 7.24.6affected
Teltonika Networks OTD
Default version status: unaffected
7.22 to < 7.24.6affected
Teltonika Networks EBG
Default version status: unaffected
7.22 to < 7.24.6affected
Teltonika Networks SWM
Default version status: unaffected
1.9 to < 1.10.4affected
Teltonika Networks TSW
Default version status: unaffected
1.9 to < 1.10.4affected