CVE-2020-5773 - OpenCVE

Improper Access Control in Teltonika firmware TRB2_R_00.02.04.01 allows a low privileged user to perform unauthorized write operations.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:S/C:P/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Teltonika-networks	Trb245 Trb245 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:teltonika-networks:trb245_firmware:00.02.04.01:*:*:*:*:*:*:*

cpe:2.3:h:teltonika-networks:trb245:-:*:*:*:*:*:*:*

References

Link	Resource
https://www.tenable.com/security/research/tra-2020-48	Exploit Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: tenable

Published: 2020-08-03T19:55:40

Updated: 2020-08-03T19:55:40

Reserved: 2020-01-06T00:00:00

Link: CVE-2020-5773

JSON object: View

NVD Information

Status : Analyzed

Published: 2020-08-03T20:15:16.450

Modified: 2020-08-04T18:22:46.553

Link: CVE-2020-5773

JSON object: View

Redhat Information

No data.

CWE

CWE-269

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:teltonika-networks:trb245_firmware:00.02.04.01:*:*:*:*:*:*:*", "matchCriteriaId": "16FA20B5-A356-4930-AE12-EFC17260E670", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:teltonika-networks:trb245:-:*:*:*:*:*:*:*", "matchCriteriaId": "79D3CA40-99A7-4C3A-957E-E5E7A9BD11D4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Improper Access Control in Teltonika firmware TRB2_R_00.02.04.01 allows a low privileged user to perform unauthorized write operations."}, {"lang": "es", "value": "Un Control de Acceso Inapropiado en Teltonika versi\u00f3n de firmware TRB2_R_00.02.04.01, permite a un usuario poco privilegiado llevar a cabo operaciones de escritura no autorizadas"}], "id": "CVE-2020-5773", "lastModified": "2020-08-04T18:22:46.553", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-08-03T20:15:16.450", "references": [{"source": "vulnreport@tenable.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.tenable.com/security/research/tra-2020-48"}], "sourceIdentifier": "vulnreport@tenable.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "nvd@nist.gov", "type": "Primary"}]}