Improper Input Validation in Teltonika Firmware TRB2

CVE-2020-5772

What is CVE-2020-5772?

The Teltonika TRB2 firmware, version TRB2_R_00.02.04.01, is affected by a vulnerability that entails improper input validation. This flaw enables a remote, authenticated attacker to upload a malicious package file, potentially leading to unauthorized elevation of privileges to root level. Such exploitation could compromise system integrity and allow for arbitrary command execution, posing significant risks to the security of devices running this firmware.

References