CVE-2024-8256CWE-732

Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches

Medium · published December 10, 2024

CVSS v4.0
5.9
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources via the API.

The record
Technical detail
CVSS v4.0
5.9 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00200 · 9.3th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2024-12-10T08:56Z
EPSS history
Timeline
  • 10 DEC 08:56Z
    Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches
    cvelistv5