Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-8256 EUVD-2024-49594GHSA-h933-4qv8-27xj

Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches

Published Dec 10, 2024 · Updated Dec 10, 2024 · Assigned by tlt_net

Description

In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources via the API.

Affected products

VendorProductAffectedFixed
Teltonika Networks RUTOS 7.0 – < 7.8 7.8
Teltonika Networks TSWOS 1.0 – < 1.3 1.3

References