Privilege Escalation in Teltonika RUTOS and TSWOS

Executive Summary

This vulnerability allows a lower privileged user on Teltonika Networks RUTOS devices (versions 7.07.1 through 7.24.1) and TSWOS devices (versions 1.03 through 1.10) to escalate their privileges to administrative level. The issue stems from unsafe calls to an execl function, which can be exploited to gain unauthorized access.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking the firmware versions of Teltonika Networks RUTOS and TSWOS devices. Verify if the device runs versions 7.07.1 through 7.24.1 for RUTOS or 1.03 through 1.10 for TSWOS. Use the device's web interface or CLI to check the firmware version.

Useful 0 Not Useful 0

Impact Analysis

An attacker with low-level access could exploit this to gain full administrative control over the device. This could lead to unauthorized configuration changes, data theft, or disruption of network services. Devices exposed to untrusted networks are at higher risk.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows privilege escalation from lower-level to administrative access, which could lead to unauthorized access to sensitive data or system configurations. Such unauthorized access may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security) by exposing personal or protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the firmware of affected devices to a version that is not vulnerable. If an update is not available, restrict access to lower privileged accounts and monitor for unusual administrative activity. Disable unnecessary services and enforce strong authentication.

Useful 0 Not Useful 0