What’s Vulnerable › Vulnerabilities

CVE-2018-19878

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-19 · updated 2026-06-17
• Weakness: CWE-416

Description

An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitation. For every successful login request, the application saves a session. A user can re-login without logging out, causing the application to store the session in memory. Exploitation of this vulnerability will increase memory use and consume free space.

Affected products

• Teltonika Rut950 Firmware: r_31.04.89

References

• https://www.triadsec.com/
• https://www.triadsec.com/CVE-2018-19878.pdf
• https://www.triadsec.com/
• https://www.triadsec.com/CVE-2018-19878.pdf

Get alerted when CVE-2018-19878 or the next vulnerability affects your stack