Cross-Site Request Forgery in Teltonika Firmware
CVE-2020-5786

8.8HIGH

Key Information:

Vendor: Teltonika-networks
Status: Teltonika Gateway Trb245
Vendor: CVE Published:; 1 October 2020

🔔 Create Teltonika-networks Vulnerability Alert

What is CVE-2020-5786?

A Cross-Site Request Forgery (CSRF) vulnerability in the Teltonika firmware TRB2_R_00.02.04.3 allows remote attackers to manipulate sensitive application actions. By persuading legitimate users to click on a specially crafted link, an attacker can exploit this vulnerability to execute unauthorized commands on behalf of the user, compromising the integrity of the application and its data.

Affected Version(s)

Teltonika Gateway TRB245 TRB2_R_00.02.04.3 firmware

References

https://www.tenable.com/security/research/tra-2020-57

x_refsource_MISC

EPSS Score

8% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 1, 2020
Vulnerability Reserved
Jan 6, 2020

CVE-2020-5786 Data

JSON