CVE-2018-17532: Command Injection
Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2018-17532?
CVE-2018-17532 has a high severity rating due to its potential for remote attackers to execute arbitrary commands with root privileges.
How do I fix CVE-2018-17532?
To remediate CVE-2018-17532, update the firmware of Teltonika RUT9XX routers to version 00.04.233 or later.
Which devices are affected by CVE-2018-17532?
CVE-2018-17532 affects Teltonika RUT900, RUT950, and RUT955 routers with firmware versions prior to 00.04.233.
What causes the vulnerability in CVE-2018-17532?
CVE-2018-17532 is caused by insufficient user input sanitization in the autologin.cgi and hotspotlogin.cgi scripts.
Can CVE-2018-17532 be exploited remotely?
Yes, CVE-2018-17532 can be exploited remotely by attackers without authentication.