What’s Vulnerable › Vulnerabilities
CVE-2024-8256: Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches
- Severity: medium (CVSS 5.9 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-12-10 · updated 2026-06-17
- Weakness: CWE-732
Description
In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources via the API.
Affected products
- Teltonika-Networks Rutos Devices: from 7.0 before 7.8 — fixed in 7.8
- Teltonika-Networks Tswos: from 1.0 before 1.3 — fixed in 1.3
How to fix
Upgrade to a fixed version: Teltonika-Networks Rutos Devices 7.8; Teltonika-Networks Tswos 1.3. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-8256 or the next vulnerability affects your stack