CVE-2024-8256 — Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches

CVE-2024-8256

Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches PUBLISHED

Description (CNA)

In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources via the API.

Affected (CNA)

Vendor / product	Versions
Teltonika Networks / RUTOS	affected 7.0 before 7.8
Teltonika Networks / TSWOS	affected 1.0 before 1.3

CWE

CWE-732

References

https://www.deepcove.support/teltonika-responsible-disclosure-proactive-testing-report/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.