Teltonika RUTOS/TSWOS: Authentication bypass leading to OS command execution
Teltonika RUTOS firmware 7.22 through 7.24.2 (RUT, RUTX, RUTM, RUTC, ATRM, TAP, CAP, OXA, DAP, TRB, OTD, EBG) and TswOS 1.9 through 1.10 (SWM, TSW) allow unauthenticated users to call internal LUA functions directly, bypassing validation that normally applies to API requests. Because these requests do not follow the proper flow, an attacker may be able to execute operating system commands on the device. The vendor describes access through the HTTPS port; the CNA vector lists adjacent network access, so the exposure is disputed. Vendor fixes are available.
Teltonika Networks · RUTOS and TSWOS
