Medium severityNVD Advisory· Published Dec 10, 2024· Updated Apr 15, 2026

CVE-2024-8256

Description

In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources via the API.

Affected products

Teltonika/RUTOSllm-create
Range: >=7.0, <7.8
Teltonika/TSWOSllm-create
Range: >=1.0, <1.3

Patches

Vulnerability mechanics

References

www.deepcove.support/teltonika-responsible-disclosure-proactive-testing-report/nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000