CVE:CVE-2017-8116
CNNVD:CNNVD-201707-060
Teltonika RUT9XX routers (又称LuCI)是立陶宛Teltonika公司的一款路由器产品。
使用00.03.265及之前版本固件的Teltonika RUT9XX路由器中的管理界面存在安全漏洞。远程攻击者可借助登录请求中的‘username’参数的shell元字符利用该漏洞以root权限执行任意命令。
solution:Upgrade teltonika rut900_firmware to a higher version than 00.03.265,and avoid the version (,00.03.265]; Upgrade teltonika rut905_firmware to a higher version than 00.03.265,and avoid the version (,00.03.265]; Upgrade teltonika rut950_firmware to a higher version than 00.03.265,and avoid the version (,00.03.265]; Upgrade teltonika rut955_firmware to a higher version than 00.03.265,and avoid the version (,00.03.265]