CVE-2018-17534

CVE-2018-17534 describes a critical vulnerability in Teltonika RUT9XX series routers with firmware prior to 00.04.233, specifically affecting models like the RUT900, RUT950, and RUT955. This flaw allows an attacker with physical access to the device to gain root privileges via an unprotected serial interface, enabling arbitrary command execution. The vulnerability carries a CVSS score of 6.8 (Medium), indicating a high impact on confidentiality, integrity, and availability once physical access is achieved, with low attack complexity. Despite its severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or active threat intelligence surrounding this particular issue. It is not listed on the CISA KEV catalog, further indicating a lack of widespread, active exploitation.