Teltonika-networks Trb245 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Teltonika-networks Trb245 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2020-5770 — CVSS 8.8 (high): Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.01 allows a remote attacker to perform sensitive application actions by…
• CVE-2020-5786 — CVSS 8.8 (high): Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a remote attacker to perform sensitive application actions by…
• CVE-2020-5773 — CVSS 8.8 (high): Improper Access Control in Teltonika firmware TRB2_R_00.02.04.01 allows a low privileged user to perform unauthorized write operations.
• CVE-2020-5772 — CVSS 7.5 (high): Improper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated attacker to gain root privileges by…
• CVE-2020-5771 — CVSS 7.5 (high): Improper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated attacker to gain root privileges by…
• CVE-2020-5789 — CVSS 6.5 (medium): Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to read the contents of arbitrary…
• CVE-2020-5784 — CVSS 6.5 (medium): Server-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user to cause the application to perform HTTP…
• CVE-2020-5787 — CVSS 6.5 (medium): Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk…
• CVE-2020-5788 — CVSS 6.5 (medium): Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk…
• CVE-2020-5785 — CVSS 6.1 (medium): Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an unauthenticated attacker to conduct reflected cross-site…