Cross-Site Request Forgery in Teltonika Firmware
CVE-2020-5786

8.8HIGH

Key Information:

Vendor

Teltonika-networks

Status
Teltonika Gateway Trb245
Vendor
CVE Published:
1 October 2020

What is CVE-2020-5786?

A Cross-Site Request Forgery (CSRF) vulnerability in the Teltonika firmware TRB2_R_00.02.04.3 allows remote attackers to manipulate sensitive application actions. By persuading legitimate users to click on a specially crafted link, an attacker can exploit this vulnerability to execute unauthorized commands on behalf of the user, compromising the integrity of the application and its data.

Affected Version(s)

Teltonika Gateway TRB245 TRB2_R_00.02.04.3 firmware

References

https://www.tenable.com/security/research/tra-2020-57
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.