CVE-2018-17533

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-10-15 · updated 2026-06-17
Weakness: CWE-79

Description

Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization.

Affected products

Teltonika Rut900 Firmware: before 00.05.01.1 — fixed in 00.05.01.1
Teltonika Rut950 Firmware: before 00.05.01.1 — fixed in 00.05.01.1
Teltonika Rut955 Firmware: before 00.05.01.1 — fixed in 00.05.01.1

How to fix

Upgrade to a fixed version: Teltonika Rut900 Firmware 00.05.01.1; Teltonika Rut950 Firmware 00.05.01.1; Teltonika Rut955 Firmware 00.05.01.1. Check the vendor advisory for mitigations.

References

http://packetstormsecurity.com/files/149781/Teltonika-RUT9XX-Reflected-Cross-Site-Scripting.html
http://seclists.org/fulldisclosure/2018/Oct/29
https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180410-01_Teltonika_Cross_Site_Scripting
http://packetstormsecurity.com/files/149781/Teltonika-RUT9XX-Reflected-Cross-Site-Scripting.html
http://seclists.org/fulldisclosure/2018/Oct/29
https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180410-01_Teltonika_Cross_Site_Scripting

Get alerted when CVE-2018-17533 or the next vulnerability affects your stack