What’s Vulnerable › Vulnerabilities

CVE-2018-17532

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 70.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-10-15 · updated 2026-06-17
• Weakness: CWE-78

Description

Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges.

Affected products

• Teltonika Rut900 Firmware: before 00.04.233 — fixed in 00.04.233
• Teltonika Rut950 Firmware: before 00.04.233 — fixed in 00.04.233
• Teltonika Rut955 Firmware: before 00.04.233 — fixed in 00.04.233

How to fix

Upgrade to a fixed version: Teltonika Rut900 Firmware 00.04.233; Teltonika Rut950 Firmware 00.04.233; Teltonika Rut955 Firmware 00.04.233. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/149777/Teltonika-RUT9XX-Unauthenticated-OS-Command-Injection.html
• http://seclists.org/fulldisclosure/2018/Oct/27
• https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180319-01_Teltonika_OS_Command_Injection
• http://packetstormsecurity.com/files/149777/Teltonika-RUT9XX-Unauthenticated-OS-Command-Injection.html
• http://seclists.org/fulldisclosure/2018/Oct/27
• https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180319-01_Teltonika_OS_Command_Injection

Get alerted when CVE-2018-17532 or the next vulnerability affects your stack