Cross-Site Request Forgery in Teltonika Firmware TRB2
CVE-2020-5770

8.8HIGH

Key Information:

Vendor

Teltonika-networks

Status
Teltonika Gateway Trb245
Vendor
CVE Published:
3 August 2020

What is CVE-2020-5770?

The Teltonika firmware TRB2_R_00.02.04.01 is susceptible to cross-site request forgery, which enables a distant attacker to execute privileged actions within the application. By persuading legitimate users to click on a specially crafted link, the attacker can trick these users into carrying out sensitive operations, thereby compromising security and potentially leading to unauthorized access or data manipulation.

Affected Version(s)

Teltonika Gateway TRB245 TRB2_R_00.02.04.01 firmware

References

https://www.tenable.com/security/research/tra-2020-48
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-5770 : Cross-Site Request Forgery in Teltonika Firmware TRB2