CVE-2018-19879

An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices

High · published March 28, 2019

CVSS v3.0
7.1
EPSS
1%
Percentile
69.3
In the wild
Unconfirmed
What it is

An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices. The authentication functionality is not protected from automated tools used to make login attempts to the application. An anonymous attacker has the ability to make unlimited login attempts with an automated tool. This ability could lead to cracking a targeted user's password.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AC:L/AV:A/A:L/C:L/I:L/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01257 · 69.3th percentile
Published
2019-03-28T16:48Z
EPSS history
Timeline
  • 28 MAR 16:48Z
    An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices
    cvelistv5